Cribl ↗
You can configure collecting Cribl data using a standard data source or connector (onboarded after July 26, 2026):
| Collection Method | Description |
|---|---|
| Standard data source overview | Forward data that Cribl collects from multiple data sources and streams to Cortex XSIAM using a Cribl data source. |
| Link to standard data source instructions | <p>Ingest data from Cribl</p><p>Configuring this data source includes this topic:</p><ul><li>Disable or delete Cribl integration</li><li>Data source UUIDs</li><li>Collect Windows Event Logs for Cortex XSIAM via Cribl</li></ul> |
| Link to connector (onboarded after July 26, 2026) | Cribl connector |