Exam4Training

If an update is made to an attribute in inputs.conf on a universal forwarder, on which Splunk component would the fish bucket need to be reset in order to reindex the data?

If an update is made to an attribute in inputs.conf on a universal forwarder, on which Splunk component would the fish bucket need to be reset in order to reindex the data?
A . Indexer
B . Forwarder
C . Search head
D . Deployment server

Answer: A

Explanation:

Reference https://community.splunk.com/t5/Archive/How-to-reindex-data-from-a-forwarder/td-p/93310

Exit mobile version