Can we merge two APIs response in Cribl?

Normally the Discover data is used by the Collection phase (i.e. Cribl use one list of files (from the Discover phase) as an Input for the Collection)

If yes, you can combine these using Redis .. or do the combination on the destination (Elasticsearch .. Splunk .. etc)

Can I assume you need both set of events / files?

But my data depends on discovery phase as well

Yes, so I need to create 2 collectors and set the same destination right?

<@U01J549PR6Y&gt; Do I need to create 2 collectors and set the same destination?

<@U03KND56HLL&gt; <@U01LSBF5953&gt; Can you guys please help me with the above query?

<@U053XJ96R2L&gt; what is the API you are working with?you will most likely need two separate API calls if you want the discovery data passed to the destination

• 1 .. :thiscribl:

There is one primary API from which I want the response and using one field from the primary API I want to extract other data using secondary API and also want the response of secondary API. So Can I do this using one Rest Collector in Cribl?

<@U053XJ96R2L&gt; , No, you will most likely need two separate REST collectors. One to only grab the discovery data (with the discover request in the collect URL), and one with both the Discover and Collect URL configured.

For an example of using the discover to pass information to the collect URL. Please see the documentation here: https://docs.cribl.io/stream/usecase-rest/#5-http-discover-and-collect-with-login-authentication

Okay, thanks