criblpacks Goto Github PK

cribl-apple-health

Collect, Transform, and Route Apple Health data.

cribl-aws-cloudtrail-logs

Collect AWS CloudTrail logs using Cribl LogStream. Use this pack to optimize your CloudTrail events and send relevant events into your logging or SIEM solution.

cribl-azure-sentinel-security

cribl-carbon-black

This pack is targeted for collections of Carbon Black events

cribl-cisco-asa-cleanup

Drop, Extract, Suppress based on certain ASA codes in lookup tables

cribl-cisco-esa-mailtext

The purpose of this pack is to provide extensive regex extraction for Cisco ESA mailtext logs. By definition ESA mailtext logs tend to be very verbose with small event sizes.

cribl-clamav

Use this pack to reformat and enhance your ClamAV logs.

cribl-common-event-format

Pre-Processor for Common Event Format (CEF) and Log Event Extended Format (LEEF) syslog messages

cribl-fortinet-fortigate-firewall

This pack is targeted for collections of Fortinet Fortigate firewall events

cribl-imperva

cribl-knowledge-pack

Examples of best-in-class use cases curated from community members and Cribl Solutions Engineers.

cribl-latency-bandwidth-monitor

Monitor internet latency and bandwidth with mtr, speedtest, LogStream and Grafana Cloud

cribl-linux-events

The linux pack is designed to support the processing of linux OS data.

cribl-microservices-logs-preprocessing

This pack contains a set of pre-processing pipelines for sources dedicated to microservices logs. This includes popular engines including Docker, Kubernetes, and Pivotal Cloud Foundry (PCF).

cribl-middleware-mq

Pack for parsing and reformatting MQ system logs: RabbitMQ, ActiveMQ and WebsphereMQ

cribl-ocsf-parquet-schemas

Cribl Parquet Schemas for Open Cybersecurity Schema Framework

cribl-palo-alto-networks

Process, reduce, and transform Palo Alto Networks Firewall logs.

cribl-splunk-forwarder-windows-classic-events-to-json

cribl-splunk-forwarder-windows-xml-events-to-json

cribl-splunk-uf-internal-redux

Use this Pack to reduce your Splunk Forwarder log volume.

cribl-syslog-input

This Pack enables a variety of functions when LogStream is used to receive data from Syslog senders.

cribl-ubiquiti-syslog

Cribl Pack for Ubiquiti Syslog

cribl-vpc-flow-for-security-teams

The Cribl Pack for VPC Flows Logs for Security Teams

cribl-webhook-pagerduty

This pack demonstrates use of the WebHook destination by using the PagerDuty service. You can use this function to alert your team of potential issues.

cribl-windows-events

This pack is targeted for collections of Window events in the Classic or newer XML format. For events in the Classic format, sometimes the Message field contains XML.

cribl_crowdstrike