-
Cribl Release 4.9 is Here!
This update brings exciting new features and usability improvements across the Cribl suite and Cribl.Cloud! Here are some hi-lights: Cribl Stream • Persistent Queue: New options—Always On and Backpressure—for reliable data flow. REST Collector: Now supports paginated results in Discover. • Global Navigation: Experience an…
-
Forcing a password change in Cribl Cloud
Is there a way to implement a password change on a Cribl Cloud local account WITHOUT using the "forgot password" link on the login page? Our access management process needs to have something like an API call or a simple password reset page available in order to implement our password management process.
-
Verify connection to Destination host
Hi, I' m working on a solution that consist of Cribl sending logs to an Onprem syslog server . Is there a way to confirm whether Cribl has established communication with the destination endpoint ( like a ping feature) . The monitoring section in Cribl is showing data is flowing but we can't find anything on the syslog…
-
Statistic data from Zabbix event streaming to mysql reporting server
Hi, i'd like know what is recommended method to save Zabbix event data (source) to mysql (destination). I understand that mysql is not typical and preffered destination but thats my use case. Thank you
-
Getting an error message:Validation error (WrongType@[events])
I am getting the following error in stream from REST Collection. message:Validation error (WrongType@[events]) : argument 'between.startTime' with value 'StringValue{value='`${C.Time.strftime(new Date((earliest * 1000.toISOString()}`'}' is not a valid 'DateTime' Here is the schema for GraphSQL and Collect POST body i am…
-
filter expresion in route with wildcard
Hi, Maybe a simple answer (i hope). For a route we want to filer the host.name, but there are a lot of host in the list so a wildcard is the best way to filter. So doing like 'drnms10*.dmz.somewhere.nl' in the filter for the servers matching with this wildcard. But with a filter 'host == 'drnms10*.dmz.somewhere.nl'' wil…
-
what is the equivalent of Splunk should_linemerge in Cribl?
I am getting data into Cribl and it is by default breaking on each line (also when there is no timestamp). So, i have added manual event breaking based on timestamp. But it still the same behavior. Is there a way to disable line breaking on each line?
-
How does "teleporting" work in Cribl Stream and Edge?
How does the 'teleporting' function work on a technical level? Based on the documentation on ports (https://docs.cribl.io/stream/ports/), it seems no inbound ports need to be opened on worker or edge nodes for the feature to work. The leader node handles teleport functionality via port 4200. When teleporting to a node,…
-
How to Protect Syslog data !!!!
Hi I'm in the process of setting up Cribl to send data from a syslog source ( AWS hosted Cisco FTDs) to Amazon S3 . Although the firewall rules are locked down to source and destination , I'm concerned about transmitting unprotected data over the Internet . Can you please advise on the best way to protect the traffic ?…
-
Data to TCP JSON source it not captured
I am trying to send data to Cribl stream→ TCP Json source using curl command, and i can see the data is coming to Cribl worker node on the given port ( verified with tcpdump) but the same data is not being captured in the TCP JSON source. Any settings i am missing here?
-
we are removing some fields using Eval function but the bytes_in and bytes_out are still the same.
we are removing some fields using Eval function but the bytes_in and bytes_out are still the same. But, in the pipeline statistics we can see the bytes_out is reduced but it is not reflecting in the Monitoring → Flows.
