-
Hi,
I started working with one hybrid tracker, that creates the entities as index:sourcetype.
For some entities the split by sourcetype is no longer necessary, so I excluded the indexes from the sco…
-
# Background:
While looking into index=syslog I noticed no logs exist. We need to onboard syslogs from our Linux machine.
# Request for us to build
Please onboard syslog logs from the Linux ser…
-
I'm not positive the best way to test prometheus discovery.
It may make sense to test with prometheus scraper in edge? Am describing [Discovery Type](https://docs.cribl.io/edge/sources-prometheus/…
-
# Background:
While looking into **index=osquery** I noticed that both the message fields need to be extracted to their individual fields just like do on the sysmon index
`message: {"name":"pack_o…
-
### Steps To Reproduce
Use Following pod definition (please notice that it does not have label section):
```
apiVersion: v1
kind: Pod
metadata:
name: memory-demo
spec:
containers:
- n…
-
When using cy.vitals within my cypress tests the lcp occasionally fails to be calculated. message is 'lcp web-vital could not be calculated, and threshold was 3000. Skipping...'
Setup:
- node v…
-
When scoping nginx, and we don't have a connection to send events out, the libraries' circular buffer will eventually fill up.
When this happens, we free events but not the event data they contain. …
-
Detail provided [here](https://docs.google.com/presentation/d/19vpeRETi_YiWBrG58bjlK8glCsF_IjggF29OvXckmTw/edit#slide=id.p).
-
-
Installed build 4.0.4 via Helm and set a password using config.adminPassword
```
helm install ls-leader cribl/logstream-leader \
--set "config.groups={wg1,wg2}" \
--set config.token="criblma…