On This Page

Home / Stream/ Reference/ CLI Reference/keys

keys

Manages encryption keys.

You must append the -g <group> argument to specify a Worker Group/Fleet. As a fallback, append the argument -g default. For example: ./cribl keys list -g default.

Sub-commands:

Sub-commands and Options
​

keys add
​

Add encryption keys.

Usage:

./cribl keys add -g default
./cribl keys add -g production_logs

Sample response:

Adding key succeeded. Key count=1

Arguments:

OptionDefinition
-a <algorithm>Encryption algorithm. Supported values: aes-256-cbc (default), aes-256-gcm.
-c <keyclass>Key class to set for the key.
-k <kms>KMS to use. Must be configured; see cribl.yml.
-e <expires>Expiration time, in epoch time.
-iUse an initialization vector. (IV size configurable for algorithm aes-256-gcm & fixed to 16 for algorithm aes-256-cbc)
-s <ivSize>(For algo ‘aes-256-gcm’ only) Initialization vector size (bytes). Supported values: 12 (default), 13, 14, 15, 16
-g <group>Worker Group ID.

keys list
​

List encryption keys.

Usage:

./cribl keys add -g default
./cribl keys add -g production_logs

Arguments:

OptionDefinition
-g <group>Worker Group ID.