Cribl Source & Destination Configuration 4

Question 1

How does Cribl Stream distribute incoming TCP connections across multiple worker processes?

Accepted Answer

Round-robin across worker processes

Answer

Cribl uses round-robin distribution to spread incoming TCP connections evenly across available worker processes.

Question 2

What certificate format does Cribl require when configuring TLS on a source or destination?

Accepted Answer

PEM-encoded certificates

Answer

Cribl requires PEM-encoded certificates (typically .pem or .crt files) when enabling TLS on sources or destinations.

Question 3

When a Cribl destination recovers after an outage, what happens to events stored in the Persistent Queue?

Accepted Answer

Cribl automatically replays queued events from the Persistent Queue in order

Answer

When the destination recovers, Cribl automatically replays events stored in the Persistent Queue, ensuring no data is lost during the outage.

Question 4

What is the effect of enabling load balancing across multiple endpoints in a Cribl destination?

Accepted Answer

Events are distributed round-robin across the configured endpoints

Answer

With load balancing enabled, Cribl distributes events in round-robin fashion across all configured endpoints in the destination.

Question 5

What is the purpose of setting an IP allowlist on a Cribl source?

Accepted Answer

Restrict which source IP addresses or CIDR ranges can send data to the source

Answer

An IP allowlist on a source limits connections to only the specified IP addresses or CIDR ranges, rejecting all other clients.

(Cribl) Cribl Observability Pipeline Certification Practice Test