Skip to main content
Solved

Event Field Not Updating Endpoint URL In Destination Configuration

  • June 23, 2026
  • 10 replies
  • 4 views

This message originated from Cribl Community Slack.
Click here to view the original link.

Hello! Is there a method to have a destination that uses an event field to update the endpoint url?
Event
{"table_id": "40004930"}

Destination
https://erehwon:8080/api/v1/table/${table_id}

Best answer by jprescott810

For HTTP based destinations, if you have an __url field in the Event, that URL should override what's configured on the Destination.

10 replies

Jon Rust
Forum|alt.badge.img
  • Employee
  • June 23, 2026
Depends on the destination type, but often, "yes" More details?

Jon Rust
Forum|alt.badge.img
  • Employee
  • June 23, 2026
You can also do this at the routing level, if you've got multiple destination configs you can point to:

Links for this message:
image.png

Jon Rust
Forum|alt.badge.img
  • Employee
  • June 23, 2026
Correction from above: Most destinations do not inherently support dynamic URLs like this. The reason being that we establish connections to the destination continually, ready to flush events as they show up. If the connection URL is based on event content, we can't operate efficiently.

Jon Rust
Forum|alt.badge.img
  • Employee
  • June 23, 2026
but you can absolutely define multiple destinations, and use the Enable Expression option in the routing table to send to the correct, pre-defined, output

Unfortunately, there maybe "several 100s" of destinations with this format, and it would be easier to "one shot" to the endpoint, it's more of a "webhook call" than "stream to a service"

  • New Participant
  • Answer
  • June 23, 2026
For HTTP based destinations, if you have an __url field in the Event, that URL should override what's configured on the Destination.

Jon Rust
Forum|alt.badge.img
  • Employee
  • June 23, 2026
@user :first_place_medal: You are correct: > When Load balancing is disabled, if an event that contains the internal field __url, that field’s value will override the General Settings > Webhook URL value. This way, you can determine the endpoint URL dynamically.

Jon Rust
Forum|alt.badge.img
  • Employee
  • June 23, 2026
thank you for the correction

  • New Participant
  • June 23, 2026
I could imagine that this would result in increased number of Concurrent Requests, depending on the cardinality. So you mayyyyy have to bump up the Advanced Settings > Request concurrency if you see Sender is at capacity messages in the logs

oooooooh, that is perfect. Thank you!