Your question is Centralized Security Observability Pipelines. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
How would you design a scalable data pipeline to centralize security observability logs from diverse infrastructure sources?
Describe a practical architecture covering collection, streaming and batch ingestion, normalization, schema evolution, storage, query access, and retention. Explain how you would preserve source context, protect sensitive security data, detect data quality issues, support replay and backfills, and monitor end-to-end health. Name specific technologies and discuss trade-offs between delivery guarantees, latency, cost, and operational complexity.