# Cribl: OAuth secret expressions fail to resolve during authentication after 4.20.0 upgrade

- Impact (vendor’s label): minor
- Status: resolved
- Started: 2026-09-16 14:52 UTC · Resolved: 2026-09-18 19:41 UTC · Duration: 2 d
- Updates: 7
- [Vendor status page: https://stspg.io/sg9yjwjwv40f](https://stspg.io/sg9yjwjwv40f)
- [Company: Cribl](https://rewindex.com/company/cribl.md)

## Timeline of updates

- **investigating** 2026-09-16 14:52 UTC: We are currently investigating this issue.
- **investigating** 2026-09-16 15:33 UTC: Investigating: We are continuing to investigate an issue that may prevent OAuth secret expressions on Microsoft Sentinel destinations from resolving during authentication following the 4.20.0 upgrade.
- **investigating** 2026-09-16 16:34 UTC: Update: We are continuing our investigation regarding this issue.
- **identified** 2026-09-16 17:44 UTC: The issue has been identified and a fix is being implemented.
- **monitoring** 2026-09-16 17:57 UTC: We have published a known issue with a workaround for this issue. See https://docs.cribl.io/results/?searchOption=known-issues&tickets=CRIBL-45304
- **monitoring** 2026-09-16 18:23 UTC: Mitigated: We have identified the issue affecting OAuth secret expressions following the 4.20.0 upgrade and published a Known Issue with a workaround. Customers experiencing authentication failures can follow the documented workaround. Known Issue can be found here: https://docs.cribl.io/results/?searchOption=known-issues&tickets=CRIBL-45304
- **resolved** 2026-09-18 19:41 UTC: This incident has been resolved.


---
Canonical: https://rewindex.com/company/cribl/incidents/np4mdfyy2k1g · Markdown: https://rewindex.com/company/cribl/incidents/np4mdfyy2k1g.md · JSON: https://rewindex.com/api/v1/companies/cribl/incidents/np4mdfyy2k1g · Generated 2026-10-20T00:05:47.513Z