Course Overview

Cribl, the Data Engine for IT and Security, empowers organizations to transform their data strategy, enabling customers to collect, process, route, and analyze all IT and security data.

In this interactive course, you'll learn how to apply Event Breakers to various Sources in Cribl. We'll work with some sample data streams to apply different types of Event Breakers, and we'll also dive into timestamp recognition.

This course highlights some common scenarios where event breaking is required:

• Identifying/breaking multi-line events that lack easily understood boundaries.
• Collecting/replaying newline-delimited JSON (NDJSON) data from an S3 bucket.
• Parsing JSON arrays returned from REST API servers.
• Separating field information from header lines in files.
• Re-breaking events in Pipelines, using the Event Breaker function.

We encourage you to also try out the Event Breakers using your own data. Let us know what you find in Cribl Community!

Let's "goat" started!