cribl

The Splunk Phantom App for Cribl supports the ability to automatically replay or collect logs from defined LogStream collectors for analysis by your SIEM tools.

Geese, a multi-purpose Cribl Tool

Examples of best-in-class use cases curated from community members and Cribl Solutions Engineers.

Keep your Maxmind Database files up to date in Cribl Cloud

Terraform modules to deploy Cribl Products

Stand-alone utility to connect to, and pull health metrics and configuration details from Cribl product deployments.

Splunk app with dashboard for searching apple health data from Cribl LogStream

Stream pack for checkpoint firewall data

CriblVision — health monitoring app for the Cribl Platform: deployment overview, throughput, source/destination/route/pipeline health, collector jobs, worker-node vitals, config drift, email alerts, and data-value dashboards

Cisco Model-Driven-Telemetry using Telegraf, Cribl, and Elasticsearch

Cribl functions to encode/decode RFC 2047

Professional GitHub profile README for Jacob P. Evans—data infrastructure specialist and Splunk/Cribl consultant with expertise in security ops and SIEM architecture. Showcases skills across cloud platforms (AWS, GCP, Azure), programming (Python, Go, Bash), DevOps tools. Highlights homelab automation, AI/LLM development, prompt engineering.

Cloud Development Kit for Cribl

Cribl App: translate Splunk SPL into Cribl Search KQL — stage-by-stage notes, dataset/lookup/macro validation, syntax check, run as a search job, save as saved search

A high-performance, standard-library-only Go log forwarding agent. Translates binary IBM z/OS (SMF), IBM i (QAUDJRN), and HPE NonStop (EMS) event streams into standardized OpenTelemetry logs. Supports TLS/mTLS and exports to Splunk HEC and OTLP/HTTP. Includes a real-time dashboard.

Ansible roles for configuring applications on Proxmox VMs and LXC containers - includes Cribl Edge, Cribl Stream, HAProxy syslog load balancer, and common application patterns

Cribl Search essentials and architecture lab -- distributed log analysis at rest, querying unstructured telemetry directly in cloud object storage without pre-indexing.

HIPAA data-minimization pipeline provisioned entirely via Terraform: Worker Group, Syslog + OpenTelemetry Sources, a masking/allowlist Pipeline citing HIPAA and NIST 800-53 SI-12, encrypted S3 + OTLP Destinations routing to Grafana/Datadog/Honeycomb.

Create custom Cribl workshops with Cribl Stream and Edge

Live map of current US wildland fire incidents and perimeters from NIFC, with state and fire drill-down, served by Cribl backend endpoints.