The universal forwarder has which capabilities when sending data? (Select all that apply.) A. Sending alerts B. Compressing data C. Obfuscating/hiding data D. Indexer acknowledgement Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Forwarding/Typesofforwarders

Which setting in indexes.conf allows data retention to be controlled by time? A. maxDaysToKeep B. moveToFrozenAfter C. maxDataRetentionTime D. frozenTimePeriodInSecs Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Indexer/SmartStoredataretention