> For the complete documentation index, see [llms.txt](https://docs.dropzone.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.dropzone.ai/unlinked/cribl.md).

# Cribl

The Dropzone AI Platform integrates with [Cribl](https://cribl.io/), a software company that specializes in observability and data pipeline solutions, with tools for collecting, processing, and routing data from any source to any destination. Dropzone access data from Cribl to use in its threat analysis.

## Integration Overview

To enable these integrations you will perform the following actions:

* Identify your Organization ID and Workspace Name
* Generate API credentials
* Enable the Data sources

## Identify your Organization ID and Workspace Name

* Log in to your Cribl account
* In the left sidebar, click "Organization"
* Copy your organization ID for use later in the Dropzone UI where it is called "Organization ID"
* In the top bar, click the Workspace icon
* Select the Workspace you want Dropzone to have access to
* Copy the Workspace Name for use later in the Dropzone UI where it is called "Workspace Name"

## Generate API Credentials

Cribl requires an API Key to enable

Within the Workspace you want Dropzone to access, do the following:

* In the left sidebar, navigate to Organization > API Credentials
* In the upper right, click "Add Credential"
* Name the credential something memorable, such as "DropzoneAI"
* Next to "Organization Permissions," select "Admin"
* Click "Save"
* Copy the Client ID and Secret Value for use later in the Dropzone UI, where they are called "Client ID" and "Client Secret," respectively

## Enable Cribl

To enable the Data Source integration, you will need the following information:

| Dropzone Field  | Source                                         |
| --------------- | ---------------------------------------------- |
| Client ID       | The "Client ID" value you copied earlier       |
| Client Secret   | The "Client Secret" value you copied earlier   |
| Organization ID | The "Organization ID" value you copied earlier |
| Workspace Name  | The "Workspace Name" value you copied earlier  |

To enable the Data Source integration, do the following:

* Navigate to your Dropzone AI tenant home page e.g. https\://*mycompany*.dropzone.app
* In the bottom left hand corner, click Settings > Integrations
* Click "Available"
* In the Search bar, search Cribl, then click "Configure"
* Input the Client ID, Client Secret, Organization ID, and Workspace Name
* Click "Test & Save" to finish

If you have any errors engage your Dropzone AI support representative.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.dropzone.ai/unlinked/cribl.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.