Packs

I am running Cribl version 4.12 and I am trying to collect Qualys detection logs using “qualys-detections” script by Jon Rust but it does not seems to be working.My Qualys login is working on EU1 platform "https://qualysapi.qualys.eu", the required python3 and env are set Here is the “qualys-detections” script --------------------------------------------------------------------------------------------- #!/usr/bin/python3import sysimport requestsimport reimport osfrom pprint import pprintfrom time import timefrom datetime import datetimedebug = Trueaction = ''APIURL = "https://qualysapi.qualys.eu"try:    API_USER = os.environ['CRIBL_username']    API_PWD = os.environ['CRIBL_password']    EARLIEST = os.environ['CRIBL_earliest']    MAX_RUN_COUNT = int(os.environ['CRIBL_max'])except:    print("CRIBL_username, CRIBL_password, CRIBL_max and CRIBL_earliest must be defined environment vars")    sys.exit(1)################################# if the collect arg var exists, we already disco'dif 'CR

cisco_asa_cleanup pack is not working for me, now sure how to make it work , need help in utilizing it, sample logsOct 1 03:23:58 asa_server_ip %ASA-6-302014: Teardown TCP connection 39876417 for VTI-Murex-abc:xx.xx.xx.xx/443 to inside:xx.xx.xx.xx/44714 duration 0:00:00 bytes 9514 TCP FINs from inside 0 0Oct 2 06:51:58 asa_server_ip %ASA-6-302013: Built inbound TCP connection 39876427 for VTI-Murex-abc:xx.xx.xx.xx/34664 (x.x.x.x/34664) to inside:xx.xx.xx.xx/443 (x.x.x.x/443) -1 -1Oct 3 04:54:58 xx.xx.xx.xx %ASA-6-302013: Built outbound TCP connection 39876426 for VTI-Murex-abc:x.x.x.x/443 (xx.xx.xx.xx443) to inside:x.x.x.x./14326 (xx.xxx.xx.xx/14326) 1 5Oct 5 01:54:58 xx.xx.xx.xx %ASA-6-302020: Built inbound ICMP connection for faddr xx.xx.xx.xx/54615 gaddr x.x.x.x/0 laddr x.xx.x.xx/0 type 8 code 0 Internal-Data0/-1:RX[-1]Oct 15 07:54:58 xx.xx.xx.xx%ASA-6-106015: Deny TCP (no connection) from x.x.x.x/38492 to xxx.xx.xx.x/6425 flags ACK  on interface VTI-Murex-abc  

Are you ready to publish a Pack? Check out the recently updated publication standards to make sure everything goes smooth and easy. 

Hello,Is is possible to import a packs directly from my own git via rest api? I want to automate it. Documentation examples is only for .cribl format https://docs.cribl.io/stream/packs#install-via-api

Hello everyone,I’m looking for more Packs to work with into Cribl stream.I know the Pack Dispencary and Packs from Github. Are there more usefull sites to look through?Or are any more Packs planned for e.x. reducing logs for Checkpoint.Thank you and best regards