Skip to main content

Hello. Is this a correct statement in the documentation? "All Notifications will also be sent as events to Cribl Stream's internal logs – both application-wide, and with a filtered view available on affected Sources and Destinations." https://docs.cribl.io/stream/notifications/#notifications-and-targetsI configured a notification that is triggering every minute and I do not see these notifications in the Cribl Internal logs I'm bringing into Splunk.

In distributed environment - the leader notification.log is not sent as part of cribl internal logs. But you can use another agent or use edge or use rest method to get the additional leader logs. https://cribl-community.slack.com/archives/CPYBPK65V/p1685028821821049


If you setup the built in cribl notification on specific destination you can send those alert directly to webhook/pagerduty/etc.


Ok thank you. I'll try to figure out the rest collector method


Reply