When Splunk indexes data in a non-clustered environment, what kind of files does it create by default?

When Splunk indexes data in a non-clustered environment, what kind of files does it create by default?
A . Index and .tsidx files.
B . Rawdata and index files.
C . Compressed and .tsidx files.
D . Compressed and meta data files.

View Answer

Answer: A

Explanation:

When Splunk indexes data in a non-clustered environment, it creates index and .tsidx files by default. The index files contain the raw data that Splunk has ingested, compressed and encrypted. The .tsidx files contain the time-series index that maps the timestamps and event IDs of the raw data. The rawdata and index files are not the correct terms for the files that Splunk creates. The compressed and .tsidx files are partially correct, but compressed is not the proper name for the index files. The compressed and meta data files are also partially correct, but meta data is not the proper name for the .tsidx files.