Cribl Internal Metrics - sourcetype.in

Question

Hello,We have turned on the cribl internal metrics source and are receiving all the metrics data in Splunk via HEC. The only metric we are not receiving is cribl.logstream.sourcetype.in_bytes. We are receiving out_bytes.Does anyone know the reason for this?Thank you

Kyle McCririe · Answer

Are you setting the Sourcetype in a Pipeline? If the data does not have a Sourcetype as its coming into Stream we cannot get the sourcetype.in_bytes.

Sign up

Using your Cribl Curious or University Account

Login to the community

Using your Cribl Curious or University Account