Curious + Community

Get data and data pipelines flowing – from any source to any destination. We’ll show you how, your peers will tell you how, and together we’ll build a better data experience for you and your organization.

Topic Categories

Announcements
The place to get the latest news on Cribl products and community.
AppScope
AppScope gives operators the visibility they need into application behavior, metrics and events with no configuration and no agent required.
Cloud
Get up and running fast on the Cribl.Cloud platform, without the hassle of running infrastructure.
Edge
Collect, process, and deliver near-real-time observability data from edge and endpoint sources.
Search
Search your data in place, at the source or in the data lake.
Stream
Route and transform logs and metrics, on your own infrastructure or Cribl.Cloud.
Packs
Pack up and share complex configurations and workflows across multiple groups or organizations.
University
Access free Cribl training, any time and at your own pace.
General Discussions
Discuss general Cribl topics with your peers.
Job Board
Do you have an open position at your company? Here is your place to do it. Once you post, we will review it and if we find that it meets the community standards, we will approve it.

Recent Discussions

Version 4.8.2 Maintenance Release
Some hi-lights: Search/Edge v9 protocol support for the NetFlow Source. New NetFlow Destination can transparently forward unmodified NetFlow v5 and v9 records to a downstream NetFlow collector. New dedicated Destination for CrowdStrike Falcon Next-Gen SIEM. Search Notifications sent to Amazon SNS can now include up to 100…
Where is the equivalent setting to Splunk's Source type > Select Source Type > Structured > _json
Hi, I'm trying to setup a Splunk HEC within Cribl Stream, and I'm encountering the error "malformed HEC event." I've encountered that error when setting up HECs in Splunk, and to correct the problem I have to go to Source type > Select Source Type > Structured > _json when editing the HEC's settings. I've been looking and…
Migrate from Cribl Stream to Worker Node and put Leader in the Cloud
I'm new to Cribl, so at this point we have single-instance Cribl Stream installed on premise. We just got a new SE, and he stated I need to move the Leader Node to the cloud as it's easier for him to troubleshoot. I have a cloud account created. I presume this is the distributed deployment, but the menus described in the…
Can i read azure event hub tags in cribl during the preprocess pipeline
Is there a way to Get Cribl Cloud leader's Internal/metrics logs to our Splunk
We are having Hybrid Cribl Cloud Setup where leader resides in Cloud. Is there a way to Get Cribl Cloud leader's Internal/metrics logs to our Splunk
How performant is Cribl Search when reading frozen Splunk buckets from S3?
I see it's possible for Cribl Search to read frozen Splunk buckets from S3 per this article below. Has anyone used it for reading Splunk frozen buckets, how fast are searches on multi-GB frozen buckets? Thanks
victoriametrics destination
Hi I am new to cribl and i am trying to collect data from kafka, aggregate it and send it to victoriametrics for that I have configured Prometheus destination http://xx.xx.xx.xx:8480/insert/0/prometheus/api/v1/import/prometheus when I run test all is ok but I don't see data in victoriametrics any idea why ?
How I can Parse Array of array in cribl stream. Each array element contains multiple strings.
Regex in Filter Expresion
Hi, Excuse me for my "not knowing", maybe a easy answer for all of you. I am in the process of migrating our Heavy Forwaders to Cribl . One off the inputs is for Cisco IOS devices. The props.conf has a Regex in it to change the sourcetype with help of a transforms. The props uses a regex to select the events. Where and how…
Setup issues
The question is focusing more towards your smaller companies, what are the usual problems your smaller customers present for first time setups?
Why am I getting this error, I have this issue with most of function in pipelines.

Quick Links

Monthly Leaderboard

Allyn Baskerville 3

H. Ulrich Schuhknecht 2

Jan Garaj 2

bigger that 1

Erin Toombs 1