Stream

Discussion List

• 
  Which Azure Sentinel tables does Cribl Stream natively support?

  Answered ✓ Announcement Erin Sweeney 5K views 2 comments 0 points Most recent by nthusiast June 2024
• 
  Cribl License

  Answered Arnold Johnson 31 views 1 comment 0 points Most recent by Dan Schmitz January 24
• 
  Cribl leader and worker node on same VM

  Answered Arnold Johnson 130 views 3 comments 0 points Most recent by Jon Rust January 21
• 
  Having difficulty translating API header to Cribl

  Answered Rex 201 views 3 comments 0 points Most recent by Jon Rust January 15
• 
  Find which worker node processed an event

  Answered ✓ Jay 89 views 1 comment 0 points Most recent by Henri Bülte January 14
• 
  what's an alternate input plugin for logs received from beats

  Question Adhithiyan Rajendran 53 views 0 comments 0 points Started by Adhithiyan Rajendran January 8
• 
  A working example of a script in Stream - Help me keep track of my goats

  Answered Allen McLeod 513 views 1 comment 0 points Most recent by Dan Schmitz January 3
• 
  Redis. How to use a Redis query in a code function?

  Answered Pawel Kwiatkowski 4.8K views 3 comments 0 points Most recent by Brian Homrich January 3
• 
  host in hec events

  Answered Jari Weststrate 545 views 3 comments 0 points Most recent by Jon Rust December 2024
• 
  filter expresion in route with wildcard

  Answered Jari Weststrate 962 views 6 comments 0 points Most recent by Jon Rust December 2024
• 
  Getting an error message:Validation error (WrongType@[events])

  Answered emmanuel.manu@edwardjones.com 257 views 1 comment 0 points Most recent by Jon Rust December 2024
• 
  Statistic data from Zabbix event streaming to mysql reporting server

  Answered Closed Martin Zivny 262 views 1 comment 0 points Most recent by Jon Rust December 2024
• 
  we are removing some fields using Eval function but the bytes_in and bytes_out are still the same.

  Answered Srinath Dayala 547 views 3 comments 0 points Most recent by Jon Rust December 2024
• 
  what is the equivalent of Splunk should_linemerge in Cribl?

  Answered Srinath Dayala 1.2K views 7 comments 0 points Most recent by Srinath Dayala December 2024
• 
  Configure REST Collector to fetch SIEM events from Akamai

  Answered Dinesh Raja 7K views 4 comments 0 points Most recent by Arunkumar k November 2024
• 
  log and sourcetype reporting in splunk

  Answered FeG 343 views 1 comment 0 points Most recent by RO NOC November 2024
• 
  Connection error: Client network socket disconnected before secure TLS connection was established

  Question Peter Slavinskis 183 views 0 comments 0 points Started by Peter Slavinskis November 2024
• 
  My journey into sourcePQ and delays in events getting indexed in Splunk for low volume data sources

  Govardhanen Gopal 181 views 0 comments 0 points Started by Govardhanen Gopal November 2024
• 
  Is there a cli or file based way to accept the agreement in a new cribl instance?

  Question ebfrater@yahoo.com 164 views 0 comments 0 points Started by ebfrater@yahoo.com November 2024
• 
  Split AZURE event Hub records into individual events

  nada28.7.1996@gmail.com 9.5K views 10 comments 0 points Most recent by yp November 2024
• 
  Has anyone had experience integrating Proofpoint logs into Cribl Stream? If so, could you share any

  Answered Ezell Edwards 574 views 1 comment 0 points Most recent by Jon Rust October 2024
• 
  New User: Beats output question

  Answered salyerma@ctbi.com 1.7K views 4 comments 0 points Most recent by salyerma@ctbi.com October 2024
• 
  Database as data source for lookup

  Answered Lukáš Mečíř 678 views 1 comment 1 point Most recent by Tony Reinke October 2024
• 
  Where is the equivalent setting to Splunk's Source type > Select Source Type > Structured > _json

  Answered bigger that 1.1K views 1 comment 0 points Most recent by Jon Rust September 2024
• 
  Can i read azure event hub tags in cribl during the preprocess pipeline

  Question Venkatsainath Pasupuleti 571 views 0 comments 0 points Started by Venkatsainath Pasupuleti August 2024
• 
  In gitops workflow for production is there a way to break glass and exit read only in an emergency?

  John Pondrom 4K views 2 comments 0 points Most recent by Sai v August 2024
• 
  How I can Parse Array of array in cribl stream. Each array element contains multiple strings.

  Answered ✓ Mad Mystery 2.6K views 3 comments 0 points Most recent by Jon Rust August 2024
• 
  Setup issues

  Question Chris Mosier 605 views 0 comments 0 points Started by Chris Mosier July 2024
• 
  Why am I getting this error, I have this issue with most of function in pipelines.

  Question Closed Quang Pham 609 views 0 comments 0 points Started by Quang Pham July 2024
• 
  How to pass syslog message without additional timestamp

  Answered ✓ Tony Reinke 1.1K views 1 comment 0 points Most recent by Tony Reinke July 2024
• 
  Cribl service won't start

  Answered Melori Arellano 3.8K views 2 comments 2 points Most recent by Ahmad Rasool July 2024