Skip to main content
Question

Could I replace my Splunk HEC with Cribl for my Corelight Sensors?

  • Mar 11, 2025 3:19 AM UTC
  • 5 replies
  • 77 views

We use corelight sensors which have the ability to Splunk HEC. Could I use Cribl as a replacement for HEC in this situation?

5 replies

xpac
Forum|alt.badge.img
  • Inspiring
  • Mar 11, 2025 3:59 AM UTC

Yes


Yep


Using the Splunk HEC source, I assume?


Yep, standard HEC source works


awesome. thanks