Skip to main content
Question

Is it feasible to enrich events with say, DNS CAA record details as it flows through stream?

  • March 11, 2025
  • 29 replies
  • 74 views

Show first post

29 replies

Forum|alt.badge.img
  • Participating Frequently
  • March 11, 2025

As if it needs help with making shit up :grin:


  • Employee
  • March 11, 2025

Hey Leif, I captured this in a feature request, the Integ team will be tracking using Cribl-17915


Oliver Hoppe
  • Author
  • Employee
  • March 11, 2025

thanks


Oliver Hoppe
  • Author
  • Employee
  • March 11, 2025

I moved it to linux and got 1 or two CAA records enriched on my events, of course the event im using to test gets no dns enrichment heh