Skip to main content

Community Discussions

Got a question about a Cribl product? You’re in the right place. This is where the community jumps in to help troubleshoot, explain features, share best practices, and point you in the right direction. Ask away — someone here has the answer (or the goat-approved workaround).

804 Topics
R
Richard HarrisNew Participant
asked in Edge
A
ananya.girish@wipfli.comNew Participant
asked in Stream
I am not able to see the logs forwarded from the PaloAlto in the sentinel in the AUX Table format.

I am using Cribl to be able to send Palo Alto syslogs to a custom AUX table in Sentinel.I have configured the port for ingesting Syslog. The private IP address of the VM hosting Cribl is also set. Source is the syslog and the destination is the sentinel. Express route is taken to go to Routing and QuickConnect .The logs are forwarded from the PaloAlto firewall. But I am not able to filter them out in the AUX table in the sentinel. Although if I SSH into Cribl box and simulate some CEF over Syslog traffic with Logger, I am able to see it in the sentinel. I want to see the logs that is being forwarded from the PaloAlto Firewall. Use Cribl to ingest Firewall logs into Sentinel Auxiliary Logs tier | LinkedInI have used this document for the setup.

210
A
M
Mars WarriorNew Participant
asked in Stream
Unable to connect worker to leader (v4.9.3 & 4.10.0) in Docker. Git required??

I used to use an older version of Cribl that just worked using the supplied docker compose example.Now I upgraded to 4.9.3 (also tried 4.10.0) and nothing works anymore:I already changed the env vars from "Master" to "Leader" (tough change!)I also tried to disable gitops, CRIBL_GIT_OPS=noneHowever:Despite that none setting, the server complains about not having gitworkers cannot connect (ECONNREFUSED)I cannot get into the GUI (ECONNREFUSED)2025-02-25T11:52:09.860Z ERR boot failed, checking for rollback | cid=api channel=cribl reason={"message":"no versioning available","stack":"Error: no versioning available\n at new b (/opt/cribl/bin/cribl.js:15:7096923)\n at P.setupInheritance (/opt/cribl/bin/cribl.js:15:7619887)\n at /opt/cribl/bin/cribl.js:15:12733811"}2025-02-25T11:52:09.860Z ERR failed to start Cribl server, exiting... | cid=api channel=cribl reason={"message":"no versioning

740
M
D
Dinesh_YashNew Participant
asked in Stream

Badge winners

Show all badges
Terms & ConditionsAccessibility statement