This message originated from Cribl Community Slack.
Click here to view the original link.
I am using Cribl Cloud and have configured a REST Collector that stores a value named 'latestLoginTime' in state management.
Should I be able to access that in a preprocessing pipeline using the following syntax? It doesn't appear to be present.
__state.latestLoginTime
Solved
Cribl Cloud Preprocessing Pipeline Unable To Access State Management Variable: __state.latestLoginTime
Best answer by atchuth_vasanthavada782
@user, I had similar requirement to filter the logs based on the latestTime in the REST API collector. What worked for me was, I have used __time > ${__collectible.state.latestLoginTime}_
in the filter of the full run mode. I haven't tried accessing in the pipeline specifically, but I just did a check for this field and it is available to the pipeline.
You might be able to create a field in the Fields area of the RC config and reference that state value. In a pipeline, no.
i haven't tried using fields to ref. Can check in a bit
@user, I had similar requirement to filter the logs based on the latestTime in the REST API collector. What worked for me was, I have used __time > ${__collectible.state.latestLoginTime}_
in the filter of the full run mode. I haven't tried accessing in the pipeline specifically, but I just did a check for this field and it is available to the pipeline.
Sign up
Already have an account? Login
Login to the community
No account yet? Create an account
Using your Cribl Curious or University Account
User Login Employee loginEnter your E-mail address. We'll send you an e-mail with instructions to reset your password.