If an update is made to an attribute in inputs.conf on a universal forwarder, on which Splunk component would the fish bucket need to be reset in order to reindex the data?

If an update is made to an attribute in inputs.conf on a universal forwarder, on which Splunk component would the fish bucket need to be reset in order to reindex the data?
A . Indexer
B . Forwarder
C . Search head
D . Deployment server

Answer: A

Explanation:

Reference https://community.splunk.com/t5/Archive/How-to-reindex-data-from-a-forwarder/td-p/93310

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments