-
Edge - Windows Event Collection Troubleshooting
This article contains common issues and troubleshooting steps for collecting Windows events using Cribl Edge. Issue: Need to clear Edge state for Windows events Possible Causes: You want to switch from collecting the "Entire Log" to "From last entry" to only collect new events. You have upgraded a Windows Server in place…
-
Windows Event Forwarding (WEF) - Troubleshooting Kerberos
Cribl supports receiving Windows events via Windows Event Forwarding (WEF). One method of authentication is done by Kerberos. This article lists some common issues and troubleshooting tips for Kerberos authentication. Helpful Error Logs Most of the relevant errors will not be logged on the Cribl side in Stream or in the…
-
Windows Event Forwarding (WEF) - Using Mutual TLS Auth
Cribl supports receiving Windows events via Windows Event Forwarding (WEF). One method of authentication is done by using client certificates and mutual TLS (mTLS). This article lists some common issues and troubleshooting tips for mTLS. Common Issues: Make sure the Network Service has permission to access the Client…