The universal forwarder has which capabilities when sending data?
The universal forwarder has which capabilities when sending data? (Select all that apply.) A. Sending alerts B. Compressing data C. Obfuscating/hiding data D. Indexer acknowledgement Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Forwarding/Typesofforwarders
Which setting in indexes.conf allows data retention to be controlled by time?
Which setting in indexes.conf allows data retention to be controlled by time? A. maxDaysToKeep B. moveToFrozenAfter C. maxDataRetentionTime D. frozenTimePeriodInSecs Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Indexer/SmartStoredataretention