Cribl Cribl Monitoring & Troubleshooting

Question 1

Which built-in Cribl tool allows you to inspect live events flowing through a pipeline without modifying the pipeline?

Accepted Answer

Live Data Capture (Preview)

Answer

Pipeline Profiler

Answer

System Metrics Dashboard

Answer

Audit Logs

Question 2

In Cribl Stream, what metric indicates that a destination is experiencing backpressure?

Accepted Answer

Persistent Queue depth increasing over time

Answer

CPU usage dropping below 10%

Answer

Source event rate increasing

Answer

Worker Group count decreasing

Question 3

What is the purpose of the Cribl System Metrics dashboard?

Accepted Answer

To monitor CPU, memory, and throughput of the Cribl deployment in real time

Answer

To visualize pipeline routing logic

Answer

To manage source and destination certificates

Answer

To configure worker group scaling policies

Question 4

When a Cribl Worker node stops sending heartbeats to the Leader, what state does the Leader assign to that worker?

Accepted Answer

Unreachable

Answer

Idle

Answer

Standby

Answer

Draining

Question 5

Which Cribl log file should you check first when diagnosing a failed pipeline function?

Accepted Answer

cribl.log on the affected Worker node

Answer

access.log on the Leader node

Answer

audit.log in the management UI

Answer

The destination queue log

Question 6

What does the 'Dropped Events' counter in Cribl's destination metrics indicate?

Accepted Answer

Events that could not be delivered and were discarded due to no persistent queue or full queue

Answer

Events that were successfully routed to a secondary destination

Answer

Events filtered out by pipeline conditions

Answer

Events compressed before forwarding