Skip to main content
Question

Why is passthrough reducing events?

  • March 11, 2025
  • 10 replies
  • 7 views

trying to understand passthrough, not sure why its reducing events.

10 replies

  • Employee
  • March 11, 2025

are you sure there is no pre or post processing pipeline attached?


  • Author
  • Known Participant
  • March 11, 2025

yes. as I did not configure them.Also, this was performed using QuickConnect so that should not be the case as well.


  • Employee
  • March 11, 2025

agreed. Is your destination getting any backpressure?


  • Author
  • Known Participant
  • March 11, 2025

at source i mentinoed index=sgwindows butat the destination side, i the index did not get populated with even a single event.networking seems ok.but Cribl egress and ingress are first so with passthru it should do expected so i go next in sequence and see..


  • Author
  • Known Participant
  • March 11, 2025

I am assuming some issue with Event breaking might cause this, its a guess.


  • Employee
  • March 11, 2025

a capture on the source should show you if event breaking works correctly


  • Author
  • Known Participant
  • March 11, 2025

yes, I wanted to run the capture as well.. so just doing the JS sandbox right now.


Forum|alt.badge.img
  • Participating Frequently
  • March 11, 2025

Is this on the same time frame?


Forum|alt.badge.img
  • Participating Frequently
  • March 11, 2025

The latter looks like it's a shorter time frame...


  • Author
  • Known Participant
  • March 11, 2025

i will rerun and share update shortly.