Logstash – Elegant Paratrooper Interview Question-Answer

Q.1 Logstash is capable of pushing messages to _________________ systems.

       A. Alerting

       B. Monitoring

       C. Archiving

       D. All of the options

Ans : All of the options


Q.2 __________ filter is powerful and comes with a wide variety of patterns to parse the logs.

       A. mutate

       B. grok

       C. Both the options

       D. None of the options

Ans : grok


Q.3 ____________________ is the flow of events through Logstash workflow.

       A. Configuration

       B. Pipeline

       C. Both the options

       D. None of the options

Ans : Pipeline


Q.4 Logstash is capable of cloning a data.

       A. True

       B. False

Ans : True


Q.5 Codecs are used to process common event structures.

       A. True

       B. False

Ans : True


Q.6 Logstash is not capable of handling multiple plugins in it’s pipeline stages.

       A. True

       B. False

Ans : False


Q.7 Which of the below is not a codec?

       A. msgpack

       B. json

       C. plain

       D. grok

Ans : grok


Q.8 ____________ syntax is used to build custom patterns.

       A. Oniguruma

       B. regexp

       C. None of the options

Ans : Oniguruma


Q.9 Unit of information containing timestamp with additional data is ____________.

       A. event

       B. metadata

       C. None of the options

Ans : event


Q.10 In Logstash, configuring ___________ stage is not mandatory.

       A. File

       B. Input

       C. Filter

       D. Elasticsearch

Ans : Filter


Q.11 Logstash is capable of pushing messages to _________________ systems.

       A. Archiving

       B. Monitoring

       C. Alerting

       D. All of the options

Ans : All of the options


Q.12 Filter used to rename a field ___________.

       A. Collate

       B. Alter

       C. Mutate

       D. Modify

Ans : Modify


Q.13 _________ merges multiline text events.

       A. Multiline Codec

       B. Merge Filter

       C. Both the options

Ans : Multiline Codec


Q.14 Geographical location of IP addresses is fetched based on the data from ___________.

       A. Maxmind GeoLite2 databases

       B. Maxmind GeoIP databases

       C. Both the options

       D. None of the options

Ans : Maxmind GeoLite2 databases


Q.15 ___________ file specifies which plugins to use.

       A. Stage Configuration

       B. Pipeline Configuration

       C. Both the options

Ans : Pipeline Configuration


Q.16 ____________ filter is used to drop events.

       A. reject

       B. drop

       C. remove

       D. None of the options

Ans : drop


Q.17 Hash is consistently applied to fingerprint fields in Logstash.

       A. True

       B. False

Ans : True


Q.18 Logstash is capable of deciphering geo coordinates from IP addresses.

       A. True

       B. False

Ans : True


Q.19 Avro records can be processed in Logstash.

       A. True

       B. False

Ans : True


Q.20 Format used to parse a the data “May 19 2000 06:32:41” is _______________.

       A. MMM dd HH:mm:ss

       B. Both the options

       C. MMM dd yyyy HH:mm:ss

Ans : MMM dd yyyy HH:mm:ss


Q.21 If the data structure varies from line to line the _________ filter is suitable.

       A. grok

       B. dissect

       C. Both the options

       D. None of the options

Ans : grok


Q.22 ___________ plugin is used to change the data representation.

       A. Codec

       B. grok

       C. Both the options

       D. None of the options

Ans : Codec


Q.23 In Logstash plugin manager is accessed using

       A. bin/logstash-plugin

       B. toolsbin/logstash-plugin

       C. Both the options

       D. sdasd

Ans : bin/logstash-plugin


Q.24 When handling multiple inputs, it’s important to _________ and ________ them.

       A. type , tag

       B. configure,tag

       C. set,tage

Ans : type , tag


Leave a Comment