These docs are for Cribl Stream 4.15 and are no longer actively maintained.
See the latest version (4.16).
Event Data Structure and Flow
This section provides a complete reference for how Cribl Stream receives, formats, and segments raw data into structured events.
Core Concepts
- Event Model: Learn about the internal structure of a Cribl Stream event.
- Event Processing Order: A step-by-step breakdown of the evaluation order of operations for incoming data.
Event Breaking and Parsing
- Event Breakers: Explains how event breaking works in Cribl Stream and how to apply them to your raw data to turn it into structured data.
- Event Breaker Types: Learn about the configuration and use cases for each Event Breaker type, allowing you to choose the most efficient parser for your specific log format.