Stream

Discussion List

• 
  Which Azure Sentinel tables does Cribl Stream natively support?

  Answered ✓ Announcement Erin Sweeney 4.9K views 2 comments 0 points Most recent by nthusiast June 2024
• 
  Having difficulty translating API header to Cribl

  Answered Rex 80 views 3 comments 0 points Most recent by Jon Rust January 15
• 
  Find which worker node processed an event

  Answered ✓ Jay 42 views 1 comment 0 points Most recent by Henri Bülte January 14
• 
  what's an alternate input plugin for logs received from beats

  Question Adhithiyan Rajendran 33 views 0 comments 0 points Started by Adhithiyan Rajendran January 8
• 
  A working example of a script in Stream - Help me keep track of my goats

  Answered Allen McLeod 471 views 1 comment 0 points Most recent by Dan Schmitz January 3
• 
  Redis. How to use a Redis query in a code function?

  Answered Pawel Kwiatkowski 4.7K views 3 comments 0 points Most recent by Brian Homrich January 3
• 
  host in hec events

  Answered Jari Weststrate 445 views 3 comments 0 points Most recent by Jon Rust December 2024
• 
  filter expresion in route with wildcard

  Answered Jari Weststrate 786 views 6 comments 0 points Most recent by Jon Rust December 2024
• 
  Getting an error message:Validation error (WrongType@[events])

  Answered emmanuel.manu@edwardjones.com 210 views 1 comment 0 points Most recent by Jon Rust December 2024
• 
  Statistic data from Zabbix event streaming to mysql reporting server

  Answered Closed Martin Zivny 206 views 1 comment 0 points Most recent by Jon Rust December 2024
• 
  we are removing some fields using Eval function but the bytes_in and bytes_out are still the same.

  Answered Srinath Dayala 457 views 3 comments 0 points Most recent by Jon Rust December 2024
• 
  what is the equivalent of Splunk should_linemerge in Cribl?

  Answered Srinath Dayala 1.1K views 7 comments 0 points Most recent by Srinath Dayala December 2024
• 
  Configure REST Collector to fetch SIEM events from Akamai

  Answered Dinesh Raja 6.9K views 4 comments 0 points Most recent by Arunkumar k November 2024
• 
  log and sourcetype reporting in splunk

  Answered FeG 289 views 1 comment 0 points Most recent by RO NOC November 2024
• 
  Connection error: Client network socket disconnected before secure TLS connection was established

  Question Peter Slavinskis 160 views 0 comments 0 points Started by Peter Slavinskis November 2024
• 
  My journey into sourcePQ and delays in events getting indexed in Splunk for low volume data sources

  Govardhanen Gopal 167 views 0 comments 0 points Started by Govardhanen Gopal November 2024
• 
  Is there a cli or file based way to accept the agreement in a new cribl instance?

  Question ebfrater@yahoo.com 142 views 0 comments 0 points Started by ebfrater@yahoo.com November 2024
• 
  Split AZURE event Hub records into individual events

  nada28.7.1996@gmail.com 9.3K views 10 comments 0 points Most recent by yp November 2024
• 
  Has anyone had experience integrating Proofpoint logs into Cribl Stream? If so, could you share any

  Answered Ezell Edwards 527 views 1 comment 0 points Most recent by Jon Rust October 2024
• 
  New User: Beats output question

  Answered salyerma@ctbi.com 1.6K views 4 comments 0 points Most recent by salyerma@ctbi.com October 2024
• 
  Database as data source for lookup

  Answered Lukáš Mečíř 644 views 1 comment 1 point Most recent by Tony Reinke October 2024
• 
  Where is the equivalent setting to Splunk's Source type > Select Source Type > Structured > _json

  Answered bigger that 1.1K views 1 comment 0 points Most recent by Jon Rust September 2024
• 
  Can i read azure event hub tags in cribl during the preprocess pipeline

  Question Venkatsainath Pasupuleti 550 views 0 comments 0 points Started by Venkatsainath Pasupuleti August 2024
• 
  In gitops workflow for production is there a way to break glass and exit read only in an emergency?

  John Pondrom 3.9K views 2 comments 0 points Most recent by Sai v August 2024
• 
  How I can Parse Array of array in cribl stream. Each array element contains multiple strings.

  Answered ✓ Mad Mystery 2.6K views 3 comments 0 points Most recent by Jon Rust August 2024
• 
  Setup issues

  Question Chris Mosier 590 views 0 comments 0 points Started by Chris Mosier July 2024
• 
  Why am I getting this error, I have this issue with most of function in pipelines.

  Question Closed Quang Pham 595 views 0 comments 0 points Started by Quang Pham July 2024
• 
  How to pass syslog message without additional timestamp

  Answered ✓ Tony Reinke 1.1K views 1 comment 0 points Most recent by Tony Reinke July 2024
• 
  Cribl service won't start

  Answered Melori Arellano 3.7K views 2 comments 2 points Most recent by Ahmad Rasool July 2024
• 
  Issue: Can't forward syslog messages from custom app to Cribl Cloud

  Answered Jitesh Khuttan 1.5K views 1 comment 0 points Most recent by Chris Breshears July 2024
• 
  What's the coolest thing you've done with a single function?

  Answered JP Bourget 5.4K views 3 comments 6 points Most recent by Anoop Ramachandran July 2024