Skip to main content
Question

I configured a notification that is triggering every minute and I do not see these notifications

  • Mar 11, 2025 3:14 AM UTC
  • 3 replies
  • 131 views

Hello. Is this a correct statement in the documentation? "All Notifications will also be sent as events to Cribl Stream's internal logs – both application-wide, and with a filtered view available on affected Sources and Destinations." https://docs.cribl.io/stream/notifications/#notifications-and-targetsI configured a notification that is triggering every minute and I do not see these notifications in the Cribl Internal logs I'm bringing into Splunk.

3 replies

Ben Marcus
  • Employee
  • Mar 11, 2025 4:35 AM UTC

In distributed environment - the leader notification.log is not sent as part of cribl internal logs. But you can use another agent or use edge or use rest method to get the additional leader logs. https://cribl-community.slack.com/archives/CPYBPK65V/p1685028821821049


Ben Marcus
  • Employee
  • Mar 11, 2025 4:35 AM UTC

If you setup the built in cribl notification on specific destination you can send those alert directly to webhook/pagerduty/etc.


Ok thank you. I'll try to figure out the rest collector method