Skip to main content
Question

Ideal way to handle windows logs

  • Mar 11, 2025 3:12 AM UTC
  • 4 replies
  • 232 views

With Cribl Stream what is the best practice for receiving windows logs?

4 replies

  • Employee
  • Mar 11, 2025 4:47 AM UTC

I would use Cribl Edge. You can explore the file system through Edge and then monitor or ingest the logs. You can also pull the Windows Event Logs.
https://docs.cribl.io/edge/sources-windows-event-logs


  • Author
  • Known Participant
  • Mar 11, 2025 4:47 AM UTC

is that the only way?


  • Employee
  • Mar 11, 2025 4:47 AM UTC

You can use file monitor with Stream installed on a machine ( https://docs.cribl.io/stream/sources-file-monitor ). You can also use Windows Event Forwarder (WEF) ( https://docs.cribl.io/stream/sources-wef ). You can also use other providers agents.

As you can see, there are multiple ways. How are you hoping to bring data in to Cribl?


  • Author
  • Known Participant
  • Mar 11, 2025 4:47 AM UTC

Trying to do this the most simple/smooth way.