Skip to main content
Solved

Event Field Not Updating Endpoint URL In Destination Configuration

  • Jun 23, 2026 3:43 PM UTC
  • 10 replies
  • 59 views

This message originated from Cribl Community Slack.
Click here to view the original link.

Hello! Is there a method to have a destination that uses an event field to update the endpoint url?
Event
{"table_id": "40004930"}

Destination
https://erehwon:8080/api/v1/table/${table_id}

Best answer by jprescott810

For HTTP based destinations, if you have an __url field in the Event, that URL should override what's configured on the Destination.
View original

10 replies

Jon Rust
Forum|alt.badge.img
  • Employee
  • Jun 23, 2026 3:43 PM UTC
Depends on the destination type, but often, "yes" More details?

Jon Rust
Forum|alt.badge.img
  • Employee
  • Jun 23, 2026 3:43 PM UTC
You can also do this at the routing level, if you've got multiple destination configs you can point to:

Links for this message:
image.png

Jon Rust
Forum|alt.badge.img
  • Employee
  • Jun 23, 2026 3:43 PM UTC
Correction from above: Most destinations do not inherently support dynamic URLs like this. The reason being that we establish connections to the destination continually, ready to flush events as they show up. If the connection URL is based on event content, we can't operate efficiently.

Jon Rust
Forum|alt.badge.img
  • Employee
  • Jun 23, 2026 3:43 PM UTC
but you can absolutely define multiple destinations, and use the Enable Expression option in the routing table to send to the correct, pre-defined, output

Unfortunately, there maybe "several 100s" of destinations with this format, and it would be easier to "one shot" to the endpoint, it's more of a "webhook call" than "stream to a service"

  • New Participant
  • Answer
  • Jun 23, 2026 3:43 PM UTC
For HTTP based destinations, if you have an __url field in the Event, that URL should override what's configured on the Destination.

Jon Rust
Forum|alt.badge.img
  • Employee
  • Jun 23, 2026 3:43 PM UTC
@user :first_place_medal: You are correct: > When Load balancing is disabled, if an event that contains the internal field __url, that field’s value will override the General Settings > Webhook URL value. This way, you can determine the endpoint URL dynamically.

Jon Rust
Forum|alt.badge.img
  • Employee
  • Jun 23, 2026 3:43 PM UTC
thank you for the correction

  • New Participant
  • Jun 23, 2026 3:43 PM UTC
I could imagine that this would result in increased number of Concurrent Requests, depending on the cardinality. So you mayyyyy have to bump up the Advanced Settings > Request concurrency if you see Sender is at capacity messages in the logs

oooooooh, that is perfect. Thank you!