Cribl FAQs

Question 1

What is the Cribl MCP Server?

Accepted Answer

The Cribl MCP Server is a Model Context Protocol (MCP) server that allows AI clients to interact with the Cribl API using natural language. It provides a standardized interface for discovering and invoking data operations within a Cribl deployment.

Question 2

What can I do with the Cribl MCP Server?

Accepted Answer

You can use the Cribl MCP Server to list worker groups/fleets, get/set pipeline configurations, get source configurations, restart worker groups, and query system metrics, all through natural language prompts via an AI client.

Question 3

How do I get started with the Cribl MCP Server?

Accepted Answer

You can quickly start using `npx` with the necessary Cribl environment variables or opt for local development by cloning the repository and installing dependencies. Node.js version 16 or later is required.

Question 4

What are some example prompts I can use?

Accepted Answer

Examples include 'what sources are we ingesting?', 'what functions are processing the palo alto traffic?', and 'please update the pipeline to include start events as well as end events.' These prompts leverage the available tools to retrieve and modify Cribl configurations.

Question 5

Where can I find detailed documentation?

Accepted Answer

Detailed documentation is available in the `docs/` directory, including configuration details (`docs/configuration.md`), usage instructions (`docs/usage.md`), and an overview of available tools (`docs/overview.md`).

Cribl

Cribl

Key Features

Use Cases

Key Features

Use Cases