Cribl Architecture & Components 3

Question 1

In Cribl Stream, what is the correct sequence of data flow through the system?

Accepted Answer

Source → Route → Pipeline → Destination

Answer

Data enters through a Source, is matched by a Route to a Pipeline for transformation, and then forwarded to a Destination.

Question 2

What does setting the 'Final' flag on a Route in Cribl Stream accomplish?

Accepted Answer

It prevents matched events from being evaluated by any subsequent routes

Answer

The Final flag stops route evaluation for matching events, ensuring they are only processed by the designated pipeline and not re-matched by later routes.

Question 3

Which Cribl Stream pipeline function is specifically designed to mask or redact sensitive data such as credit card numbers or SSNs?

Accepted Answer

Mask

Answer

The Mask function applies regex-based redaction or hashing to specific fields, protecting sensitive PII data as it flows through the pipeline.

Question 4

What is the purpose of the 'Eval' function in a Cribl Stream pipeline?

Accepted Answer

To add, modify, or remove event fields using JavaScript expressions

Answer

Eval allows users to write JavaScript expressions to dynamically compute new fields, transform existing field values, or remove fields from events.

Question 5

In a Cribl Stream pipeline, what does 'cloning' an event enable?

Accepted Answer

Producing multiple copies of an event that can be routed to different destinations

Answer

Cloning creates additional copies of an event within the pipeline, enabling fan-out so one event can reach multiple destinations with potentially different transformations.

(Cribl) Cribl Observability Pipeline Certification Practice Test

(Cribl) Cribl Observability Pipeline Certification Practice Test

Cribl Architecture & Components 3