![]() If not specified, Cribl Stream applies the default 1 MB. Enter a numeral with units of KB, MB, etc. Max file size: The maximum data volume to store in each queue file before closing it and (optionally) applying the configured Compression. Defaults to 1000.Ĭommit frequency: The number of events to send downstream before committing that Stream has read them. Max buffer size: The maximum number of events to hold in memory before reporting backpressure to the Source. Smart: This option will engage PQ only when the Source detects backpressure from Cribl Stream's data processing engine.Always On: This default option will always write events to the persistent queue, before forwarding them to Cribl Stream's data processing engine.Mode: Select a condition for engaging persistent queues. If enabled, PQ is automatically configured in Always On mode, with a maximum queue size of 1 GB disk space allocated per Worker Process.Įnable Persistent Queue: Defaults to No. On Cribl-managed Cribl.Cloud Workers (with an Enterprise plan), this tab exposes only the Enable Persistent Queue toggle. This will buffer and preserve incoming events when a downstream Destination is down, or exhibiting backpressure. In this section, you can optionally specify persistent queue storage, using the following controls. Maximum TLS version: Optionally, select the maximum TLS version to accept from connections. Minimum TLS version: Optionally, select the minimum TLS version to accept from connections. E.g., to match the subject CN=, you would enter: worker\.cribl\.local. As needed, escape regex tokens to match literal characters. Defaults to No.Ĭommon name: Regex matching subject common names in peer certificates allowed to connect. Validate client certs: Reject certificates that are not authorized by a CA in the CA certificate path, or by another trusted CA (e.g., the system's CA). Used to perform mutual authentication using SSL certs. Path can reference $ENV_VARS.Īuthenticate client (mutual auth): Require clients to present their certificates. Path can reference $ENV_VARS.ĬA certificate path: Server path containing CA certificates (in PEM format) to use. Passphrase: Passphrase to use to decrypt private key.Ĭertificate path: Server path containing certificates (in PEM format) to use. ![]() Private key path: Server path containing the private key (in PEM format) to use. When toggled to Yes:Ĭertificate name: Name of the predefined certificate. TLS Settings (Server Side) Įnabled defaults to No. Use a tab or hard return between (arbitrary) tag names. Tags: Optionally, add tags that you can use for filtering and grouping in Cribl Stream. Input ID: Enter a unique name to identify this Splunk Source definition.Īddress: Enter hostname/IP to listen for Splunk data. You can clone or directly modify this Source to further configure it, and then enable it. Cribl Stream ships with a Splunk TCP Source preconfigured to listen on Port 9997.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |