In which phase of the index time process does the license metering occur?
In which phase of the index time process does the license metering occur? A. Input phase B. Parsing phase C. Indexing phase D. Licensing phase Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Admin/HowSplunklicensingworks
Which file is now monitored?
This file has been manually created on a universal forwarder: /opt/splunkforwarder/etc/apps/my_TA/local/inputs.conf [monitor:///var/log/messages] sourcetype=syslog index=syslog A new Splunk admin comes in and connects the universal forwarders to a deployment server and deploys the same app with a new inputs.conf file: /opt/splunk/etc/deployment-apps/my_TA/local/inputs.conf [monitor:///var/log/maillog] sourcetype=maillog index=syslog Which file is now monitored? A. /var/log/messages B. /var/log/maillog C. /var/log/maillog and […]
Where should apps be located on the deployment server that the clients pull from?
Where should apps be located on the deployment server that the clients pull from? A. $SPLUNK_HOME/etc/apps B. $SPLUNK_HOME/etc/search C. $SPLUNK_HOME/etc/master-apps D. $SPLUNK_HOME/etc/deployment-apps Reference: https://answers.splunk.com/answers/371099/how-to-configure-deployment-apps-to-push-to-client.html
Which Splunk component distributes apps and certain other configuration updates to search head cluster members
Which Splunk component distributes apps and certain other configuration updates to search head cluster members? A. Deployer B. Cluster master C. Deployment server D. Search head cluster master Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/DistSearch/PropagateSHCconfigurationchanges
Which Splunk component consolidates the individual results and prepares reports in a distributed environment?
Which Splunk component consolidates the individual results and prepares reports in a distributed environment? A. Indexers B. Forwarder C. Search head D. Search peers Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Indexer/Advancedindexingstrategy
Which forwarder type can parse data prior to forwarding?
Which forwarder type can parse data prior to forwarding? A. Universal forwarder B. Heaviest forwarder C. Hyper forwarder D. Heavy forwarder Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Forwarding/Typesofforwarders
Which parent directory contains the configuration files in Splunk?
Which parent directory contains the configuration files in Splunk? A. $SPLUNK_HOME/etc B. $SPLUNK_HOME/var C. $SPLUNK_HOME/conf D. $SPLUNK_HOME/default Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Admin/Configurationfiledirectories
Which of the following are supported configuration methods to add inputs on a forwarder?
Which of the following are supported configuration methods to add inputs on a forwarder? (Select all that apply.) A. CLI B. Edit inputs.conf C. Edit forwarder.conf D. Forwarder Management Reference: https://docs.splunk.com/Documentation/Forwarder/7.3.1/Forwarder/HowtoforwarddatatoSplunkEnterprise#Define_inputs_on_the_universal_forwarder_with_configuration_files
In which Splunk configuration is the SEDCMD used?
In which Splunk configuration is the SEDCMD used? A. props.conf B. inputs.conf C. indexes.conf D. transforms.conf Reference: https://answers.splunk.com/answers/212128/why-sedcmd-configured-in-propsconf-is-working-duri.html
In case of a conflict between a whitelist and a blacklist input setting, which one is used?
In case of a conflict between a whitelist and a blacklist input setting, which one is used? A. Blacklist B. Whitelist C. They cancel each other out. D. Whichever is entered into the configuration first. Reference: https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=8&ved=2ahUKEwj0r6Lso6bkAhUqxYUKHbWlDz4QFjAHegQIAxAC&url=http%3A%2F%2Fsplunk.training%2Fshowpdf.asp%3Fdata%3D789BB6B10C1B4376B548D711B4377F3F4B511B437805A8EC11B437742EA8F11B43779B6FA211B4376EA657C11B4376FC19B311B4377E2407E11B43730AF97411B4377F3F4B511B437742EA8F11B43779B6FA211B43771F822111B437731365811B43730AF97411B437789BB6B11B4376B548D711B4377F3F4B511B437805A8EC11B437742EA8F11B43779B6FA211B4376EA657C11B4376FC19B311B4377E2407E11B43732E61E211B4377F3F4B511B437742EA8F11B43779B6FA211B43771F822111B437731365811B43746D0DC011B4377549EC611B4377BED81011B437789BB6B11B4376D8B14511B437731365811B4376B548D711B4377F3F4B511B4376FC19B311B43732E61E211B4376D8B14511B4377AD23D911B437789BB6B11B43730AF97411B4373989B2C11B437386E6F511B437386E6F511B4373DF6C0811B43737532BE11B4373BC039A11B437351CA5011B43737532BE11B43730AF97411B4375BD6DD511B43730AF97411B437564E8C211B43730AF97411B437%257C2318D1%257C11649A&usg=AOvVaw2e9s-JweivuCkqTb4-Y9uW