Cortex XSIAM
Cribl
Configure the Cribl data source and connector for Cortex XSIAM.
You can configure collecting Cribl data using a standard data source or connector (onboarded after July 26, 2026):
Collection Method
Description
Standard data source overview
Forward data that Cribl collects from multiple data sources and streams to Cortex XSIAM using a Cribl data source.
Link to standard data source instructions
Configuring this data source includes this topic:
Disable or delete Cribl integration
Data source UUIDs
Collect Windows Event Logs for Cortex XSIAM via Cribl
Link to connector (onboarded after July 26, 2026)
Last updated
Was this helpful?