Cribl

You can configure collecting Cribl data using a standard data source or connector (onboarded after July 26, 2026):

| Collection Method | Description |
| ------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Standard data source overview | Forward data that Cribl collects from multiple data sources and streams to Cortex XSIAM using a Cribl data source. |
| Link to standard data source instructions | <p><a href="cribl/ingest-data-from-cribl">Ingest data from Cribl</a></p><p>Configuring this data source includes this topic:</p><ul><li>Disable or delete Cribl integration</li><li>Data source UUIDs</li><li>Collect Windows Event Logs for Cortex XSIAM via Cribl</li></ul> |
| Link to connector (onboarded after July 26, 2026) | [Cribl connector](cribl/cribl-connector) |

Sub-topics

• Ingest data from Cribl
  • Disable or delete Cribl integration
  • Data souce UUIDs
  • Collect Windows Event Logs for Cortex XSIAM via Cribl
• Cribl connector