General Discussions

Discussion List

• 
  I am needing to modify a default filter in a pack,

  Answered Mick Shanaghy 205 views 6 comments 0 points Most recent by Raanan Dagan September 22
• 
  Which source/destination combo is advised and provides the best compression?

  Answered John Pondrom 332 views 5 comments 0 points Most recent by David Maislin September 22
• 
  Is there a Cribl.cloud specific documentation?

  Answered Taylor Mill 387 views 8 comments 0 points Most recent by Taylor Mill September 22
• 
  I'm having a hard time get Redis running on my Cribl Workers

  Answered Rob Franz 1.6K views 43 comments 0 points Most recent by xpac xpac September 22
• 
  Is there a way to check historical data volume for a Source?

  Answered alan y 127 views 2 comments 0 points Most recent by alan y September 22
• 
  Question on renaming a field in a json event

  Answered jlstanley 326 views 7 comments 0 points Most recent by jlstanley September 22
• 
  When I have notification with default target, Does this get recorded in Cribl logs?

  Answered Martin Prado 413 views 9 comments 0 points Most recent by Martin Prado September 22
• 
  Anyone have a list of prefixes that are used for Source / Destination objects?

  Answered Brandon McCombs 274 views 6 comments 0 points Most recent by Brandon McCombs September 22
• 
  Performance question on multiple drops vs regex function

  Answered Brett Windom 277 views 5 comments 0 points Most recent by dritan September 22
• 
  Can cribl read .trc files that are produced by SQL Server?

  Answered Nick Kwiecien Nick Kwiecien 203 views 4 comments 0 points Most recent by Brandon McCombs September 22
• 
  Database connection unsuccessful: Failed to connect - What certificate is it using?

  Answered Shawn Cannon 2.4K views 67 comments 0 points Most recent by Jeremiah Ross September 22
• 
  Are there any best practices to collect cribl logs and forward to Splunk?

  Answered Martin Prado 326 views 5 comments 0 points Most recent by Martin Prado September 22
• 
  Is there a way we could use cribl to aggregate our log source data and create a report from it?

  Answered Nick Kwiecien Nick Kwiecien 153 views 3 comments 0 points Most recent by Manish September 22
• 
  Has anyone here used API calls to perform Health Checks from a F5 VIP to the Worker Nodes?

  Answered ✓ Christopher Owen 247 views 2 comments 0 points Most recent by Christopher Owen September 22
• 
  Is is possible to import a packs directly from my own git via rest api?

  Answered Thomas Vogt 329 views 8 comments 0 points Most recent by David Maislin September 22
• 
  Could I replace my Splunk HEC with Cribl for my Corelight Sensors?

  Answered Franky Laarits 259 views 5 comments 0 points Most recent by Franky Laarits September 22
• 
  Guidance on when to add additional processors due to a large number of consecutive tasks?

  Answered Brendan Dalpe 230 views 5 comments 0 points Most recent by Jon Rust September 22
• 
  Is there a way to rename a field and remove parts of it?

  Answered Jeremy Prescott 95 views 2 comments 0 points Most recent by David Maislin September 22
• 
  Is anyone sending PerfmonMetrics through Cribl?

  Answered jlstanley 2K views 43 comments 0 points Most recent by morrisnky September 22
• 
  What information is needed (software, storage, hardware and network) to calculate ROI?

  Answered Franky Laarits 437 views 10 comments 0 points Most recent by Franky Laarits September 22
• 
  Is there an easy way to analyze the memory usage of specific procs and pipelines?

  Answered Brett Windom 332 views 6 comments 0 points Most recent by Brett Windom September 22
• 
  Could the Azure Blob collector potentially be used to pull in Azure Table data too?

  Answered Ryan Hennessy 229 views 3 comments 0 points Most recent by Ryan Hennessy September 22
• 
  How do we decide on a safe value for concurrency for Chronicle destination?

  Answered Eugene Katz 863 views 14 comments 0 points Most recent by Kam Amir September 22
• 
  How do you guys get data into Cribl to transform before hitting Splunk indexers?

  Answered Robbert Hink 1.1K views 17 comments 0 points Most recent by Robbert Hink September 22
• 
  Are there documented procedures for moving the leader to new hardware?

  Answered Dave Geller 383 views 7 comments 0 points Most recent by Brandon McCombs September 22
• 
  Check if a cribl instance is configured as a worker or a leader from the command-line?

  Answered Franky Laarits 223 views 6 comments 0 points Most recent by Brandon McCombs September 22
• 
  When does the license clock start midnight my local timezone or GMT?

  Answered Corey McClure 69 views 1 comment 0 points Most recent by Brendan Dalpe September 22
• 
  What exactly does a Syslog source do when it experiences backpressure?

  Answered Quinn Stevenson 420 views 7 comments 0 points Most recent by Quinn Stevenson September 22
• 
  Script source in a distributed environment - Run once to avoid duplicates?

  Answered Jeremy Prescott 143 views 3 comments 0 points Most recent by Harry Gardner September 22
• 
  Does anyone else deal with a high rate of job failures for Office365 Message Trace logs?

  Answered Nick Kwiecien Nick Kwiecien 504 views 7 comments 0 points Most recent by JP Bourget September 22