These docs are for Cribl Stream 4.6 and are no longer actively maintained.
See the latest version (4.13).
How to Secure the Auth Token for the Leader Node
For new installations, the Cribl Stream Leader generates its own secure, random auth token. The Leader also creates a new token when you switch from Single-instance to the Distributed mode by configuring a Node to be a Leader Node.
In versions before v4.5.0, the default token was
criblmaster. This default auth token does not change automatically if you upgrade your deployment to v4.5.0 or later.
If you need to change your auth token (for example, you prefer to use your own token or you are still using the older default of criblmaster),
change the token value to a unique secure value.
This applies whether you configure your Leader via the UI, or via a Docker Compose file.
Changing the Auth Token Value
Changing the auth token once you have Worker Nodes deployed will break communication between the Nodes and the Leader. If you do change the auth token value, make sure that you update the auth tokens for the Leader and the Worker Nodes to the same value.
Create a unique token value with strong security. We recommend creating a string that contains at least 14 characters and includes uppercase letters, lowercase letters, and numbers.
Allowed Characters in the Leader Auth Token
Starting in version 4.6.1, these are the only allowed characters you can use in the auth token for your Cribl Stream Leader:
- a-z: Lowercase letters from a to z.
- A-Z: Uppercase letters from A to Z.
- 0-9: Digits from 0 to 9.
_: Underscore.!: Exclamation mark.-: Hyphen (dash).
In version 4.5.1 and newer, you can’t use these special characters in the Leader auth token:
<: Open angle bracket.>: Close angle bracket.": Double quotation mark.{: Open brace.}: Close brace.|: Pipe.\: Backslash.^: Caret.': Single quotation mark.`: Backtick.- Whitespace
One option is to generate a token value with a shell command. For example, on Linux or Mac OS, the following command generates a 32-character value:
head /dev/urandom | LC_ALL=C tr -dc A-Za-z0-9 | head -c32 | cut -c 1-Once you have created a secure auth token value, you can change it:
- In the Auth token field in the UI.
- In the appropriate place in your Docker Compose file (if applicable).
- For the Leader via command line:
./cribl mode-master -u <token>. If your Cribl Stream deployment uses High Availability (HA), you must use the command line (not the UI) with the command listed above. - For the Worker Nodes via command line:
./cribl mode-managed-edge -u <token>for Cribl Edge../cribl mode-worker -u <token>for Cribl Stream.
In the UI, you’ll find the Auth token setting by navigating to Global Settings. Select System, and then Distributed Settings to Leader Settings, as shown in the screenshot below.
