Cribl ↗

Abstract

Learn more about collecting Cribl logs using a standard data source in Cortex XSIAM.

You can configure collecting Cribl data using a standard data source:

Cribl vendor

Description

Standard data source overview

Forward data that Cribl collects from multiple data sources and streams to Cortex XSIAM using a Cribl data source.

Link to standard data source instructions

Ingest data from Cribl

Configuring this data source includes this topic:

  • Disable or delete Cribl integration

  • Data source UUIDs

  • Collect Windows Event Logs for Cortex XSIAM via Cribl