We have updated our Terms of Service, Code of Conduct, and Addendum.

Cribl Search to query S3 bucket - "Error initializing task queue"

Options

Hi guys, we are trying to configure Cribl Search to query S3 bucket but have been facing error that says "Error initializing task queue" .... "Access Denied"We are seeing the Cribl Stream worker AssumeRole into our AWS account for the existing S3 Source Collector that we have configured previously but, we’re not seeing any Cloudtrail logs in our SIEM to show that the Cribl Search role (new role that we created in AWS to configure Cribl Search only) is able to AssumeRole into our account i.e we’re not seeing any STS logs in SIEM for Cribl Search role.Can anyone provide help on this?

Tagged:

Best Answer

  • dritan
    dritan Posts: 51 ✭✭
    Answer ✓
    Options

    I am assuming you followed the steps here: https://docs.cribl.io/search/aws-access and here: https://docs.cribl.io/search/set-up-s3?

Answers

  • Tony Reinke - Cribl
    Tony Reinke - Cribl Posts: 134 admin
    edited August 2023
    Options

    From @Kam Amir : You’re going to need to update the permissions for the role accessing your S3 bucket.

  • dritan
    dritan Posts: 51 ✭✭
    Answer ✓
    Options

    I am assuming you followed the steps here: https://docs.cribl.io/search/aws-access and here: https://docs.cribl.io/search/set-up-s3?

  • Abdullah Zubair
    Abdullah Zubair Posts: 4
    edited August 2023
    Options

    We didn't consider the encryption so will update the role for it. Will get back here if we see anymore blockers, thanks both 😀