- All Exams Instant Download
Which of the following must be done to define user permissions when integrating Splunk with LDAP?
Which of the following must be done to define user permissions when integrating Splunk with LDAP?A . Map UsersB . Map GroupsC . Map LDAP InheritanceD . Map LDAP to Active DirectoryView AnswerAnswer: B Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/8.0.5/Security/ConfigureLDAPwithSplunkWeb
Local user accounts created in Splunk store passwords in which file?
Local user accounts created in Splunk store passwords in which file?A . $ SFLUNK_KOME/etc/passwdB . $ SFLUNK_KCME/etc/authenticationC . $ S?LUNK_HCME/etc/users/passwd.confD . $ SPLUNK HCME/etc/users/authentication.confView AnswerAnswer: A
How is a remote monitor input distributed to forwarders?
How is a remote monitor input distributed to forwarders?A . As an app.B . As a forward.conf file.C . As a monitor.conf file.D . As a forwarder monitor profile.View AnswerAnswer: A Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/8.0.5/Data/Usingforwardingagents
Which configuration files are used to transform raw data ingested by Splunk? (Choose all that apply.)
Which configuration files are used to transform raw data ingested by Splunk? (Choose all that apply.)A . props.confB . inputs.confC . rawdata.confD . transforms.confView AnswerAnswer: A Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/8.0.5/Data/Configuretimestamprecognition
If an update is made to an attribute in inputs.conf on a universal forwarder, on which Splunk component would the fish bucket need to be reset in order to reindex the data?
If an update is made to an attribute in inputs.conf on a universal forwarder, on which Splunk component would the fish bucket need to be reset in order to reindex the data?A . IndexerB . ForwarderC . Search headD . Deployment serverView AnswerAnswer: A Explanation: Reference https://community.splunk.com/t5/Archive/How-to-reindex-data-from-a-forwarder/td-p/93310
Which of the following types of data count against the license daily quota?
Which of the following types of data count against the license daily quota?A . Replicated dataB . splunkd logsC . Summary index dataD . Windows internal logsView AnswerAnswer: B Explanation: Reference: https://community.splunk.com/t5/Deployment-Architecture/License-usage-in-Indexer-Cluster/m-p/493548
Which of the following are supported options when configuring optional network inputs?
Which of the following are supported options when configuring optional network inputs?A . Metadata override, sender filtering options, network input queues (quantum queues)B . Metadata override, sender filtering options, network input queues (memory/persistent queues)C . Filename override, sender filtering options, network output queues (memory/persistent queues)D . Metadata override, receiver filtering...
To minimize license issues, what is the best way to add 10 TB of historical data to the index?
An admin is running the latest version of Splunk with a 500 GB license. The current daily volume of new data is 300 GB per day. To minimize license issues, what is the best way to add 10 TB of historical data to the index?A . Buy a bigger Splunk...
Following best practices, which types of Splunk component instances are needed?
The volume of data from collecting log files from 50 Linux servers and 200 Windows servers will require multiple indexers. Following best practices, which types of Splunk component instances are needed?A . Indexers, search head, universal forwarders, license masterB . Indexers, search head, deployment server, universal forwardersC . Indexers, search...
Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)
Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)A . HostB . ServerC . SourceD . SourcetypeView AnswerAnswer: CD Explanation: Reference: https://answers.splunk.com/answers/3687/host-stanza-in-props-conf-not-being-honored-forudp-514-data-sources.html
