Which of the following are reasons to create separate indexes? (Choose all that apply.)

Which of the following are reasons to create separate indexes? (Choose all that apply.)
A . Different retention times.
B . Increase number of users.
C . Restrict user permissions.
D . File organization.

View Answer

Answer: A,D

Explanation:

Reference: https://community.splunk.com/t5/Getting-Data-In/Why-does-Splunk-have-multiple-indexes/m-p/12063