Skip to main content
Question

Why is passthrough reducing events?

  • Mar 11, 2025 3:17 AM UTC
  • 10 replies
  • 130 views

trying to understand passthrough, not sure why its reducing events.

10 replies

Neil Parisi
  • Employee
  • Mar 11, 2025 4:11 AM UTC

are you sure there is no pre or post processing pipeline attached?


  • Author
  • Known Participant
  • Mar 11, 2025 4:11 AM UTC

yes. as I did not configure them.Also, this was performed using QuickConnect so that should not be the case as well.


Neil Parisi
  • Employee
  • Mar 11, 2025 4:11 AM UTC

agreed. Is your destination getting any backpressure?


  • Author
  • Known Participant
  • Mar 11, 2025 4:11 AM UTC

at source i mentinoed index=sgwindows butat the destination side, i the index did not get populated with even a single event.networking seems ok.but Cribl egress and ingress are first so with passthru it should do expected so i go next in sequence and see..


  • Author
  • Known Participant
  • Mar 11, 2025 4:11 AM UTC

I am assuming some issue with Event breaking might cause this, its a guess.


Neil Parisi
  • Employee
  • Mar 11, 2025 4:11 AM UTC

a capture on the source should show you if event breaking works correctly


  • Author
  • Known Participant
  • Mar 11, 2025 4:11 AM UTC

yes, I wanted to run the capture as well.. so just doing the JS sandbox right now.


xpac
Forum|alt.badge.img
  • Inspiring
  • Mar 11, 2025 4:11 AM UTC

Is this on the same time frame?


xpac
Forum|alt.badge.img
  • Inspiring
  • Mar 11, 2025 4:11 AM UTC

The latter looks like it's a shorter time frame...


  • Author
  • Known Participant
  • Mar 11, 2025 4:11 AM UTC

i will rerun and share update shortly.