Summary:
This document will detail some of the common issues you may encounter when installing Cribl Stream, as well as some frequently asked questions.
Troubleshooting
Issue: Cribl Stream service will not start or fails on startup
Possible Causes:
- Stream was installed as the root user
- Permissions were not correctly applied
Possible Resolutions:
- Make sure to install Stream as a non-root user; 'cribl' user is recommended
- Check the logs for information about the issue, including $CRIBL_HOME/log/cribl.log
- Confirm permissions are set properly for this user on the $CRIBL_HOME folder and subfodler
- If Stream was installed as root, you may need to correct permissions on /tmp/cribl_stream and use a 'chown' command to change ownership to the correct user
Frequently Asked Questions
Q: Can I whitelist the IPs for the download and telemetry URL https://cdn.cribl.io ?
A: This URL is fronted by a content distribution network, and due to the wide ranging and potentially dynamic IP list, whitelisting is really not feasible. Instead, see if your security solution supports URL based whitelisting or consider using a proxy to manage the access.
