- All Exams Instant Download
Which of the following statements describe deployment management? (Choose all that apply.)
Which of the following statements describe deployment management? (Choose all that apply.)A . Requires an Enterprise license.B . Is responsible for sending apps to forwarders.C . Once used, is the only way to manage forwarders.D . Can automatically restart the host OS running the forwarder.View AnswerAnswer: A
Which of the following are supported configuration methods to add inputs on a forwarder? (Choose all that apply.)
Which of the following are supported configuration methods to add inputs on a forwarder? (Choose all that apply.)A . CLIB . Edit inputs.confC . Edit forwarder.confD . Forwarder ManagementView AnswerAnswer: AB Explanation: Reference: https://docs.splunk.com/Documentation/Forwarder/7.3.1/Forwarder/HowtoforwarddatatoSplunkEnterprise#Define_inputs_on_the_universal_forwarder_with_configuration_files
Which file is now monitored?
This file has been manually created on a universal forwarder: /opt/splunkforwarder/etc/apps/my_TA/local/inputs.conf [monitor:///var/log/messages] sourcetype=syslog index=syslog A new Splunk admin comes in and connects the universal forwarders to a deployment server and deploys the same app with a new inputs.conf file: /opt/splunk/etc/deployment-apps/my_TA/local/inputs.conf [monitor:///var/log/maillog] sourcetype=maillog index=syslog Which file is now monitored?A . /var/log/messagesB...
Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)
Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)A . HostB . ServerC . SourceD . SourcetypeView AnswerAnswer: CD Explanation: Reference: https://answers.splunk.com/answers/3687/host-stanza-in-props-conf-not-being-honored-forudp-514-data-sources.html
Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)
Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)A . HostB . ServerC . SourceD . SourcetypeView AnswerAnswer: CD Explanation: Reference: https://answers.splunk.com/answers/3687/host-stanza-in-props-conf-not-being-honored-forudp-514-data-sources.html
Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)
Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)A . HostB . ServerC . SourceD . SourcetypeView AnswerAnswer: CD Explanation: Reference: https://answers.splunk.com/answers/3687/host-stanza-in-props-conf-not-being-honored-forudp-514-data-sources.html
Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)
Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)A . HostB . ServerC . SourceD . SourcetypeView AnswerAnswer: CD Explanation: Reference: https://answers.splunk.com/answers/3687/host-stanza-in-props-conf-not-being-honored-forudp-514-data-sources.html
Where can scripts for scripted inputs reside on the host file system? (Choose all that apply.)
Where can scripts for scripted inputs reside on the host file system? (Choose all that apply.)A . $SPLUNK_HOME/bin/scriptsB . $SPLUNK_HOME/etc/apps/binC . $SPLUNK_HOME/etc/system/binD . $SPLUNK_HOME/etc/apps/<your_app>/binView AnswerAnswer: ACD Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Data/Getdatafromscriptedinputs#Where_to_place_the_scripts_for_scripted_inputs
The priority of layered Splunk configuration files depends on the file’s:
The priority of layered Splunk configuration files depends on the file’s:A . OwnerB . WeightC . ContextD . Creation timeView AnswerAnswer: C Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.3.0/Admin/Wheretofindtheconfigurationfiles
During search time, which directory of configuration files has the highest precedence?
During search time, which directory of configuration files has the highest precedence?A . $SPLUNK_HOME/etc/system/localB . $SPLUNK_HOME/etc/system/defaultC . $SPLUNK_HOME/etc/apps/app1/localD . $SPLUNK_HOME/etc/users/admin/localView AnswerAnswer: C Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.3.0/Admin/Wheretofindtheconfigurationfiles
