CRcriblio
packs

Install a Pack

Changed on

Install a Pack.<br/><br/>To install an uploaded Pack, provide the <code>source</code> value from the <code>PUT /packs</code> response as the <code>source</code> parameter in the request body.<br/><br/>To install a Pack by importing from a URL, provide the direct URL location of the <code>.crbl</code> file for the Pack as the <code>source</code> parameter in the request body.<br/><br/>To install a Pack by importing from a Git repository, provide <code>git+<repo-url></code> as the <code>source</code> parameter in the request body.<br/><br/>If you do not include the <code>source</code> parameter in the request body, an empty Pack is created.

post/packs

Request

  • Base URL
    / (relative, and the document was published on a file host, not at the API’s origin)
  • Auth
    • HTTP bearer
    • or OAuth 2
      Client credentials
      Token URL: https://login.cribl.cloud/oauth/token

Request body

OR

Example request

{
  "version": "1.0.0",
  "tags": {
    "domain": [
      "security",
      "observability"
    ],
    "technology": [
      "aws",
      "splunk"
    ]
  }
}

Response

The installed Pack object in a single-item list.

countinteger required

Number of items returned in the items array.

Example response

{
  "items": [
    {
      "tags": {
        "domain": [
          "security",
          "observability"
        ],
        "technology": [
          "aws",
          "splunk"
        ]
      },
      "version": "1.0.0"
    }
  ]
}

Changes

  • fd542bb248a2Revision changes
    • info

      added the non-success response with the status

    • info

      added the non-success response with the status

  • 3816b6fddba1Revision changes
    • info

      added the optional property // to the response with the status

    • info

      added the optional property // to the response with the status