- All Exams Instant Download
The priority of layered Splunk configuration files depends on the file’s:
The priority of layered Splunk configuration files depends on the file’s:A . OwnerB . WeightC . ContextD . Creation timeView AnswerAnswer: C Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.3.0/Admin/Wheretofindtheconfigurationfiles
Which of the following are supported configuration methods to add inputs on a forwarder? (Select all that apply.)
Which of the following are supported configuration methods to add inputs on a forwarder? (Select all that apply.)A . CLIB . Edit inputs.confC . Edit forwarder.confD . Forwarder ManagementView AnswerAnswer: AB Explanation: Reference: https://docs.splunk.com/Documentation/Forwarder/7.3.1/Forwarder/HowtoforwarddatatoSplunkEnterprise#Define_inputs_on_the_universal_forwarder_with_configuration_files
Which parent directory contains the configuration files in Splunk?
Which parent directory contains the configuration files in Splunk?A . $SPLUNK_HOME/etcB . $SPLUNK_HOME/varC . $SPLUNK_HOME/confD . $SPLUNK_HOME/defaultView AnswerAnswer: A Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Admin/Configurationfiledirectories
Where should apps be located on the deployment server that the clients pull from?
Where should apps be located on the deployment server that the clients pull from?A . $SPLUNK_HOME/etc/appsB . $SPLUNK_HOME/etc/searchC . $SPLUNK_HOME/etc/master-appsD . $SPLUNK_HOME/etc/deployment-appsView AnswerAnswer: A Explanation: Reference: https://answers.splunk.com/answers/371099/how-to-configure-deployment-apps-to-push-toclient.html
Which Splunk component consolidates the individual results and prepares reports in a distributed environment?
Which Splunk component consolidates the individual results and prepares reports in a distributed environment?A . IndexersB . ForwarderC . Search headD . Search peersView AnswerAnswer: A Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Indexer/Advancedindexingstrategy
Which Splunk component distributes apps and certain other configuration updates to search head cluster members?
Which Splunk component distributes apps and certain other configuration updates to search head cluster members?A . DeployerB . Cluster masterC . Deployment serverD . Search head cluster masterView AnswerAnswer: A Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/DistSearch/PropagateSHCconfigurationchanges
What will the output be?
You update a props.conffile while Splunk is running. You do not restart Splunk and you run this command: splunk btool props list C-debug. What will the output be?A . A list of all the configurations on-disk that Splunk contains.B . A verbose list of all configurations as they were when...
Which setting in indexes.confallows data retention to be controlled by time?
Which setting in indexes.confallows data retention to be controlled by time?A . maxDaysToKeepB . moveToFrozenAfterC . maxDataRetentionTimeD . frozenTimePeriodInSecsView AnswerAnswer: D Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Indexer/SmartStoredataretention
The universal forwarder has which capabilities when sending data? (Select all that apply.)
The universal forwarder has which capabilities when sending data? (Select all that apply.)A . Sending alertsB . Compressing dataC . Obfuscating/hiding dataD . Indexer acknowledgementView AnswerAnswer: D Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Forwarding/Typesofforwarders
