Cribl Data Routing & Processing 3

Question 1

In Cribl Stream, what is the role of a 'Lookup' function within a pipeline?

Accepted Answer

Enriches events using a static or dynamic lookup table

Answer

The Lookup function enriches events by matching a field value against a CSV or Redis-backed lookup table and appending additional fields.

Question 2

Which Cribl Stream feature lets you selectively replay archived data from an S3 bucket back into your pipelines?

Accepted Answer

Data Replay

Answer

Data Replay allows you to send previously archived data stored in S3 back through Cribl Stream pipelines for reprocessing or analysis.

Question 3

What is the primary use of the 'Eval' function in Cribl Stream?

Accepted Answer

Adding, modifying, or deleting fields using JavaScript expressions

Answer

The Eval function lets you manipulate event fields using JavaScript expressions, making it one of the most versatile pipeline functions.

Question 4

In Cribl Stream, which load balancing strategy distributes events evenly across all workers in a worker group?

Accepted Answer

Round-robin

Answer

Round-robin load balancing distributes events sequentially across all available workers, ensuring even load distribution.

Question 5

Which Cribl Stream pipeline function would you use to parse a raw syslog message into structured fields?

Accepted Answer

Syslog Parser

Answer

The Syslog Parser function parses RFC 3164 or RFC 5424 syslog messages into structured fields like facility, severity, hostname, and message.

(Cribl) Cribl Observability Pipeline Certification Practice Test