We have updated our Terms of Service, Code of Conduct, and Addendum.

With the Scripted Collector, how can I tell if it is a Preview, Discovery, Full Run, or Scheduled?

Quinn Stevenson
Quinn Stevenson Posts: 16 ✭
in General Discussions

When Cribl calls the script for a Scripted Collector, how can I tell if it's a Preview, Discovery, Full Run, or Scheduled invocation?

Answers

  • Harry Gardner
    Harry Gardner Posts: 59 mod

    Monitoring -> System -> Job Inspector

  • Harry Gardner
    Harry Gardner Posts: 59 mod

    Ad-hoc tab for Preview and Full Run

  • Harry Gardner
    Harry Gardner Posts: 59 mod

    Scheduled tab for scheduled jobs

  • Quinn Stevenson
    Quinn Stevenson Posts: 16 ✭

    Sorry- I wasn't specific enough. I need to know how the script is being invoked inside the script so I know whether or not to update the checkpoint

  • Harry Gardner
    Harry Gardner Posts: 59 mod

    Sorry for the delay, was looking at env vars / args passed to the script collector. Not seeing anything that would distinguish the run type.

  • Harry Gardner
    Harry Gardner Posts: 59 mod

    Feel free to drop a suggestion in the <#CGCU5A18B|feature-request> channel. Seems reasonable to make this available to script collector in the env or params.

  • Quinn Stevenson
    Quinn Stevenson Posts: 16 ✭

    Thank You for looking <@UUP82DJHE&gt; - I was trying that too. I'll just have to be careful :slightly_smiling_face:. I'll drop something in <#CGCU5A18B|feature-request> shortly.

  • Ben Marcus
    Ben Marcus Posts: 27 mod

    i've created CRIBL-15090 for this feature enhancement

  • Quinn Stevenson
    Quinn Stevenson Posts: 16 ✭

    Thanks Ben!! It's been a busy day so I hadn't got around to that yet.

Categories