Outage in Cribl
OAuth secret expressions fail to resolve during authentication after 4.20.0 upgrade
Resolved MinorIncident Report
Summary AI Generated
Following the Cribl 4.20.0 upgrade, OAuth secret expressions failed to resolve during authentication on Microsoft Sentinel destinations, causing authentication failures. Cribl identified the issue and published a known workaround within approximately four hours of initial investigation. The incident lasted roughly 53 hours before being fully resolved on September 18, 2026.
We are currently investigating this issue.
Trusted by 1,000+ teams
The Status Page Aggregator with Early Outage Detection
Stop finding out about outages from your users. Monitor 6,320+ cloud services and get alerted the second something breaks.
Latest Updates ( sorted recent to last )
RESOLVED
15 days ago - at 09/18/2026 07:41PM
This incident has been resolved.
MONITORING
17 days ago - at 09/16/2026 06:23PM
Mitigated: We have identified the issue affecting OAuth secret expressions following the 4.20.0 upgrade and published a Known Issue with a workaround. Customers experiencing authentication failures can follow the documented workaround.
Known Issue can be found here: https://docs.cribl.io/results/?searchOption=known-issues&tickets=CRIBL-45304
MONITORING
17 days ago - at 09/16/2026 05:57PM
We have published a known issue with a workaround for this issue. See https://docs.cribl.io/results/?searchOption=known-issues&tickets=CRIBL-45304
IDENTIFIED
17 days ago - at 09/16/2026 05:44PM
The issue has been identified and a fix is being implemented.
INVESTIGATING
18 days ago - at 09/16/2026 04:34PM
Update:
We are continuing our investigation regarding this issue.
INVESTIGATING
18 days ago - at 09/16/2026 03:33PM
Investigating: We are continuing to investigate an issue that may prevent OAuth secret expressions on Microsoft Sentinel destinations from resolving during authentication following the 4.20.0 upgrade.
INVESTIGATING
18 days ago - at 09/16/2026 02:52PM
We are currently investigating this issue.
Latest Cribl outages
Cribl Insights showing incomplete data - 15 days ago
OAuth secrets containing C.* expressions fail to resolve during authentication - about 1 month ago
Volume drop in Insights Metrics post 4.17.1 Upgrade - 5 months ago
Increase in errors in code function following 4.17.0 release - 7 months ago
The Status Page Aggregator with Early Outage Detection
With IsDown, you can monitor all your critical services' official status pages from one centralized dashboard and receive instant alerts the moment an outage is detected. Say goodbye to constantly checking multiple sites for updates and stay ahead of outages with IsDown.
Start free trialNo credit card required · Cancel anytime · 6320 services available
Integrations with
