Community Discussions

The most recent content from our members.

Recent Discussions

Vestibulum leo risus
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Donec faucibus volutpat sagittis. Vivamus sapien ipsum, vulputate a cursus ac, ullamcorper sit amet ex. Duis auctor risus urna. Donec condimentum massa vitae ante sodales condimentum. Sed lobortis ac diam quis volutpat. Cras lacinia egestas turpis. Pellentesque…
DNS Header Flag fields that are boolean, can I convert this to ECS by just having one object
Teach me, oh Pipeline Wizards....I have DNS Header Flag fields coming in that are boolean, like `aa: false`, `ra: true`, `rd: true`, `tc: false`, etc. I would like to convert this to ECS by just having one object (`dns.header_flags`) with an array of the header flag names show in an array if their above referenced field…
DNS Header Flag fields that are boolean, can I convert this to ECS by just having one object
Teach me, oh Pipeline Wizards....I have DNS Header Flag fields coming in that are boolean, like `aa: false`, `ra: true`, `rd: true`, `tc: false`, etc. I would like to convert this to ECS by just having one object (`dns.header_flags`) with an array of the header flag names show in an array if their above referenced field…
DNS Header Flag fields that are boolean, can I convert this to ECS by just having one object
Teach me, oh Pipeline Wizards....I have DNS Header Flag fields coming in that are boolean, like `aa: false`, `ra: true`, `rd: true`, `tc: false`, etc. I would like to convert this to ECS by just having one object (`dns.header_flags`) with an array of the header flag names show in an array if their above referenced field…
Is there a way to debug a kafka input?
Hello All, Is there a way to debug a kafka input? The workers don't consume any data, but the status is "Green". I know that there are live data in the topic as I can see it when using the `bin/kafka-console-consumer.sh` command with the same settings from a worker.
How do I programmatically (via API) export then merge a Pack from one worker group to another?
I want to use the API to export a Pack from one worker group and merge it to another. How do I do that?
How do I remove duplicate cribl_pipe events when forwarding data from on-premises to Cribl.cloud?
For example, I have name=domain\username, but I want to remove the extra slash.
How would I go about replacing text within an event?
For example, I have name=domain\username, but I want to remove the extra slash.
How would I go about filtering out events where a field is equal to a certain value?
mtimeMs - Modify Time in Milliseconds
What does mtimeMs show in the logs?

Hello Stranger!

It looks like you're new here. Sign in or register to get started.

Quick Links

Leaderboard

cbreshears 6