Skip to main content

When Cribl calls the script for a Scripted Collector, how can I tell if it's a Preview, Discovery, Full Run, or Scheduled invocation?

Monitoring -> System -> Job Inspector


Ad-hoc tab for Preview and Full Run


Scheduled tab for scheduled jobs


Sorry- I wasn't specific enough. I need to know how the script is being invoked inside the script so I know whether or not to update the checkpoint


Sorry for the delay, was looking at env vars / args passed to the script collector. Not seeing anything that would distinguish the run type.


Feel free to drop a suggestion in the <#CGCU5A18B|feature-request> channel. Seems reasonable to make this available to script collector in the env or params.


Thank You for looking <@UUP82DJHE&gt; - I was trying that too. I'll just have to be careful 🙂. I'll drop something in <#CGCU5A18B|feature-request> shortly.


Thanks Ben!! It's been a busy day so I hadn't got around to that yet.


i've created CRIBL-15090 for this feature enhancement


Reply