Cribl Stream Cribl Edge Cribl Search Cribl Lake AppScope

Known Issues Release Notes Cribl Copilot

Sandbox GitHub Repos Docker Hub Cribl as Code

(Ctrl+K / Cmd+K)

No Results Try to type a different keyword or phrase

What are you looking for? Type a keyword or phrase above

All Results Press Enter

API Reference Cribl.Cloud

4.12

Release Notes 4.15 4.14 4.13 4.12 4.11 4.10 4.9 4.8 4.7 4.6 4.5 4.4 4.3 4.2 4.1 4.0 3.5 3.4 3.3

4.12

4.15 4.14 4.13 4.12 4.11 4.10 4.9 4.8 4.7 4.6 4.5 4.4 4.3 4.2 4.1 4.0 3.5 3.4 3.3

About Cribl Edge

Basic Concepts QuickConnect

Cribl Edge on Linux

Explore Cribl Edge on Linux Installing Cribl Edge on Linux Enabling Start on Boot Running Edge as an Unprivileged User Installing Edge on Linux via RPM Anti-Virus Exceptions Upgrading Cribl Edge on Linux (CLI)Upgrading RPM Installations of Cribl Edge FIPS Mode for Cribl Edge (Linux)

Cribl Edge on Windows

Explore Cribl Edge on Windows Installing Cribl Edge on Windows Windows User Permissions and Requirements System Proxy Configuration on Windows Windows Observability Using Cribl Edge Upgrading Edge on Windows via the UI Manually Upgrading Windows Edge Nodes FIPS Mode for Cribl Edge (Windows)

Cribl Edge on Containers

Run Cribl Edge in a Docker Container Deploy Cribl Edge via Kubernetes Kubernetes Observability Using Cribl Edge Upgrading Containers

Setting Up Cribl Edge

Getting Started with Cribl Edge Cribl.Cloud vs. Self-Hosted

Getting Started Tutorial Configuring Cribl Edge Forward Custom Data with Cribl Edge Tags Monitoring your Infrastructure with Cribl Edge Monitor and Troubleshoot Cribl Edge

Deployment Planning

Large-Scale Deployments

Set Up Leader and Edge Nodes Managing Edge Node Config Bundles Leader High Availability/Failover Ports

Initial Cribl.Cloud Setup Managing Cribl.Cloud Enterprise Cloud

Enable Universal Subscription

Connect On-Prem Leaders to Cribl.Cloud Data Payloads for Connected Environments

Working with Fleets and Edge Nodes

Explore Cribl Edge Fleets Design Fleet Hierarchy Configure Fleet Settings Create and Manage Fleets and Subfleets Configure Fleets and Deploy Changes Recover a Deleted Fleet

How Edge Nodes and Leader Nodes Work Together Manage Edge Nodes Add and Update Edge Nodes Filter Edge Nodes Mapping Edge Nodes to Fleets

Configuring Workspaces

Upgrading Overview Better Practices for Upgrading Cribl Edge

Upgrading via the UI

Upgrading Edge Leader via UI Upgrading Edge Nodes via UI Monitoring Node Upgrade Status Fleet Upgrading Use Case Backup & Rollback via the UI

Upgrading Manually

Upgrading Manually Overview Manual Rollback

Troubleshooting Edge Upgrades

Email Notifications

Notification Targets

Webhook Notification Targets PagerDuty Notification Targets Slack Notification Targets AWS SNS Notification Targets Email Notification Targets

Licensing Cribl.Cloud Billing Uninstalling Cribl Edge from Linux Uninstalling Cribl Edge from Windows

Customizing the interface

Custom Banners Custom Login Page

Access Management

Authentication Permissions Members Teams Local Users Roles Using ACLs to allow Cribl Edge to Read Files

Cribl.Cloud SSO

Configuring SSO groups SSO with Okta and OIDC SSO with Okta and SAML SSO with Microsoft Entra ID and SAML SSO with Ping Identity SSO Troubleshooting

SSO with Okta and OIDC SSO with Okta and SAML SSO with Microsoft Entra ID and OIDC SSO with Microsoft Entra ID and SAML SSO with Ping Identity SSO Troubleshooting

Secure your Cribl.Cloud Deployment Cribl.Cloud Security Practices Secure your On-Prem/Hybrid Deployment

Secure Leader and Communication

Secure the Leader Auth Token TLS Defaults and System-wide Settings Secure Cribl.Cloud with TLS and mTLS Configure mTLS Authentication On-Prem Import Certificates and Keys Configure TLS for API and UI Access Authenticate Sources and Destinations Configure System Proxy Configure SOCKS Proxy

Manage Secrets and Keys

Create and Manage Encryption Keys Create and Manage Secrets Configure KMS Providers

FIPS Mode for Cribl Edge (Linux)FIPS Mode for Cribl Edge (Windows)

Collecting Data

Exec File Monitor Journal Files Kubernetes Events Kubernetes Logs Kubernetes Metrics System Metrics System State

Cribl HTTP Cribl TCP Cribl Internal Datagen

Amazon Data Firehose

Prometheus Edge Scraper Prometheus Remote Write Grafana Loki

Splunk HEC Splunk TCP

Windows Event Forwarder

Client Certificate for WEF Kerberos for WEF

Windows Event Logs Windows Metrics

AppScope Datadog Agent Elasticsearch API HTTP/S (Bulk API)Raw HTTP/S Metrics Model Driven Telemetry NetFlow & IPFIX OpenTelemetry (OTel)SNMP Trap Syslog TCP JSON TCP (Raw)UDP (Raw)Zscaler Cloud NSS

Managing Destinations

Cribl HTTP Cribl TCP Disk Spool Default DevNull Output Router

Amazon CloudWatch Logs Amazon Kinesis Data Streams Amazon S3 Compatible Stores Amazon SQS Amazon Security Lake

Azure Blob Storage Azure Data Explorer Azure Event Hubs Azure Monitor Logs Microsoft Sentinel

Elasticsearch Elastic Cloud

Google SecOps Google Cloud Logging Google Cloud Pub/Sub Google Cloud Storage

Kafka Confluent Cloud Amazon MSK

Graphite StatsD StatsD Extended

New Relic Ingest

New Relic Events New Relic Logs & Metrics

Prometheus Grafana Cloud Loki

Splunk HEC Splunk Single Instance Splunk Load Balanced

CrowdStrike Falcon LogScale ClickHouse Cortex XSIAM CrowdStrike Falcon Next-Gen SIEM Datadog Dynatrace HTTP Dynatrace OTLP Exabeam Filesystem/NFS Honeycomb InfluxDB MinIO NetFlow OpenTelemetry (OTel)SentinelOne DataSet ServiceNow Cloud Observability SignalFx SNMP Trap Sumo Logic Syslog TCP JSON Wavefront Webhook

Manage Backpressure

About Persistent Queues Optimize Source Persistent Queues Optimize Destination Persistent Queues About Destination Backpressure Triggers

About Load Balancing Cribl Edge to Cribl Stream Transfer Data Between Workspaces or Environments Forward Custom Data with Cribl Edge Tags

Integrating with Other Services

Cribl Edge as a Sidecar Container in AWS ECS Amazon Security Lake Integration Amazon Elastic Kubernetes Services (EKS) Add-On for Edge

Internal Metrics Internal Logs Tracking Data Activity for an Edge Node

Working with Data

Event Model Event Processing Order Routes

Create Pipelines Using Cribl Copilot Editor Data Preview

Import Packs Share Packs Collaborate on Developing Packs Packs Publication Standards

Using Datagens Manage Metrics and High Cardinality Data Onboarding Build Custom Logic to Route and Process Your Data

Aggregations Aggregate Metrics Auto Timestamp CEF Serializer Chain Clone Code Comment DNS Lookup Drop Dynamic Sampling Eval Event Breaker Flatten Fold Keys GeoIP Grok JSON Unroll Lookup Mask Numerify OTLP Logs OTLP Metrics OTLP Traces Parser Publish Metrics Redis Regex Extract Regex Filter Rename Rollup Metrics Sampling Serialize SNMP Trap Serialize Suppress Tee Unroll XML Unroll Prometheus Publisher (deprecated)Reverse DNS (deprecated)Trim Timestamp (deprecated)

Knowledge Libraries

Lookups Library Event Breakers Parsers Library Variables Library Regex Library Grok Patterns Library Schemas Library Parquet Schemas AppScope Configs

auth boot-start cloud-workspace decrypt diag encrypt git help keys limits mode-master mode-single mode-edge mode-worker mode-managed-edge nc node pack parquet pipe reload restart scope start status stop vars version

cribl.yml breakers.yml certificates.yml groups.yml inputs.yml instance.yml ipfix-information-elements.yml jobs.yml job-limits.yml leader.yml licenses.yml limits.yml logger.yml mappings.yml messages.yml notifications.yml outputs.yml parsers.yml perms.yml persistent-queue.yml policies.yml regexes.yml roles.yml samples.yml schemas.yml scripts.yml secrets.yml service.yml vars.yml

Cribl Expressions

C.Crypto C.Encode and C.Decode C.Lookup C.Mask C.Net C.Text C.Time Other expressions String Date Math Number

Environment Variables Kubernetes Metrics Details Linux System Metrics Details Windows System Metrics Details

Troubleshooting

Known Issues Common Challenges on the Edge Diagnosing Issues

Known Issues Release Notes

On This Page

Home / Edge/ Troubleshooting·Known Issues

These docs are for Cribl Edge 4.12 and are no longer actively maintained.
See the latest version (4.15).

Known Issues

View filterable Known Issues for Cribl Edge. Check if issues are resolved or find temporary workarounds.

Previous

Previous

Next

Next

How can I help you today?

Common Resources

Copyright © 2017-2025 Cribl, Inc. All rights reserved.