Cribl

Source

Fluent Bit

Open-source, multi-platform log processor

Fluent Bit is an open-source log processor and forwarder that allows you to collect any data (like metrics and logs) from different sources, enrich them with filters, and send them to multiple destinations. Based on Fluentd, Fluent Bit is designed to run in distributed environments where resources are constrained (such as Kubernetes, other Cloud instances, or containers)

How to get data flowing

Fluent Bit has multiple output plugins that can be used to send to Stream. This integration is facilitated through Cribl Stream’s TCP JSON Source or Splunk HEC Source.

Fluent Bit to Stream via TCP JSON

  • Configure Fluent Bit to forward data to Stream over TCP, by adding this to your Fluent Bit .conf file

  • Configure Stream to read the incoming data via Sources > TCP JSON.

  • Enable and configure TLS on the TCP JSON Source.

  • Stream will receive data as it becomes available.

Fluent Bit to Stream via Splunk HEC

  • Configure Fluent Bit to forward data to LogStream via Splunk HTTP, by adding this to your Fluent Bit .conf file

  • Configure Stream to read the incoming data via Sources > Splunk HEC.

  • Stream will receive data as it becomes available.

View Documentation

Cribl, the Data Engine for IT and Security, empowers organizations to transform their data strategy. Customers use Cribl’s suite of products to collect, process, route, and analyze all IT and security data, delivering the flexibility, choice, and control required to adapt to their ever-changing needs.

We offer free training, certifications, and a free tier across our products. Our community Slack features Cribl engineers, partners, and customers who can answer your questions as you get started and continue to build and evolve. We also offer a variety of hands-on-Sandboxes for those interested in how companies globally leverage our products for their data challenges.