Cribl Source & Destination Configuration

Question 1

Which destination is used for sending data to Splunk?

Accepted Answer

Splunk HEC

Answer

Splunk HEC (HTTP Event Collector) is a common and efficient method for sending data to Splunk indexers. Cribl provides a dedicated Splunk HEC destination type, allowing it to seamlessly forward processed observability data to Splunk for indexing, storage, and subsequent analysis.

Question 2

Which source ingests files from a directory?

Accepted Answer

File Monitor

Answer

The `File Monitor` input in Cribl is designed to ingest log data from files residing in specified directories on the file system. It continuously monitors these files for new entries, allowing Cribl to collect both historical and real-time log data from local or mounted storage locations.

Question 3

What is required when setting up a destination?

Accepted Answer

Hostname, port, protocol

Answer

When configuring a destination in Cribl, essential network details are required to establish connectivity with the target system. This typically includes the hostname or IP address of the destination, the specific port it listens on, and the communication protocol (e.g., TCP, UDP, HTTP) to be used for data transmission.

Question 4

Which cloud storage can Cribl output to?

Accepted Answer

Amazon S3

Answer

Cribl supports outputting processed data to various cloud storage services for archiving or further analysis. Amazon S3 (Simple Storage Service) is a widely used and supported destination, allowing users to store large volumes of data securely and cost-effectively in the AWS cloud.

Question 5

Which source captures log data from network ports?

Accepted Answer

TCP/UDP

Answer

The `TCP/UDP` input in Cribl is specifically designed to capture log data that is sent over network ports using either the TCP or UDP protocols. This allows Cribl to act as a listener for various network-based log sources, such as Syslog, NetFlow, or custom application streams, enabling real-time ingestion.

(Cribl) Cribl Observability Pipeline Certification Practice Test

(Cribl) Cribl Observability Pipeline Certification Practice Test

Cribl Source & Destination Configuration