Curious + Community

Get data and data pipelines flowing – from any source to any destination. We’ll show you how, your peers will tell you how, and together we’ll build a better data experience for you and your organization.

Topic Categories

Announcements
The place to get the latest news on Cribl products and community.
AppScope
AppScope gives operators the visibility they need into application behavior, metrics and events with no configuration and no agent required.
Cloud
Get up and running fast on the Cribl.Cloud platform, without the hassle of running infrastructure.
Edge
Collect, process, and deliver near-real-time observability data from edge and endpoint sources.
Search
Search your data in place, at the source or in the data lake.
Stream
Route and transform logs and metrics, on your own infrastructure or Cribl.Cloud.
Packs
Pack up and share complex configurations and workflows across multiple groups or organizations.
University
Access free Cribl training, any time and at your own pace.
General Discussions
Discuss general Cribl topics with your peers.
Job Board
Do you have an open position at your company? Here is your place to do it. Once you post, we will review it and if we find that it meets the community standards, we will approve it.

Recent Discussions

Is Cribl.Cloud instance within a VPC, VPC individual to the customer, or are they a tenant?
Random question, and doesn’t really affect me or customer base atm, but is something that ALWAYS comes up with Splunk SaaS. When we say that that Cribl.Cloud instance is deployed within a VPC, is this VPC individual to the customer, or are they a tenant? Original Post is from
Is communication from the Cloud back to the worker also on 4200?
For the on-prem workers in a hybrid deployment, which ports need to be open inbound? Doc mentions 4200 and 443 outbound to Cribl cloud, but is communication from the Cloud back to the worker also on 4200? Or another port?
My commit buttons are greyed out with an error "Commit message must be at least 2 characters long"
Hello, I haven't logged into my free instance for a while. But now my commit buttons are greyed out with an error "Commit message must be at least 2 characters long".
Are the ingress ip’s listed in Cribl Cloud static?
hi all, Are the ingress ip’s listed in Cribl Cloud static? I need to have some firewall changes implemented to allow events in. Original Post was from
Most direct method of finding your completed scheduled searches?
Very excited about scheduled searches! Couple of questions: What’s the most direct method of finding your completed scheduled searches? Is it search->history->scheduled? I don’t see a way to see anything but the most recent runs of a search. Am I missing something? Original Message was from
Will my Cribl Cloud URL always have a prefix of "main-" ?
My Cribl Cloud URL seems to prefix a main- when navigating to leader URL from the Cribl Cloud home page. Is this prefix standard for all URLs? Are there scenarios where this might be a different prefix? Original Question asked on
I accidentally clicked on the Delete button on my Cloud Org, can that be undone?
We don't want our Cloud org to be removed, can that action be undone? We don't want to lose our configurations or any of the data being processed.
How do I remove duplicate cribl_pipe events when forwarding data from on-premises to Cribl.cloud?
When I run an event through Cribl Stream on premises and then send to Cribl Cloud, I end up with duplicate cribl_pipe events. How can I remove the duplicate?
How do I find out what IPs I should allow for Cribl.Cloud?
Our Splunk Cloud environment requires IP whitelists in order to access or ingest data. If we have a Cribl cloud org created, is there a way to get the IPs that would be required to whitelist in Splunk Cloud?
Which TLS certs are used for syslog in Cribl Cloud?
In a cribl cloud deployment, what certificate do we use for TLS for syslog?

Quick Links

Monthly Leaderboard

H. Ulrich Schuhknecht 2

Allyn Baskerville 1

Erin Toombs 1

Satyanarayana Vinay Achanta 1

Mad Mystery 1