- All Exams Instant Download
To set up a Network input in Splunk, what needs to be specified'?
To set up a Network input in Splunk, what needs to be specified'?A . File path.B . Username and passwordC . Network protocol and port number.D . Network protocol and MAC address.View AnswerAnswer: C
What are the values for host and index for [stanza1] used by Splunk during index time, given the following configuration files?
What are the values for host and index for [stanza1] used by Splunk during index time, given the following configuration files? A . host=server1 index=unixinfoB . host=server1 index=searchinfoC . host=searchsvr1 index=searchinfoD . host=unixsvr1 index=unixinfoView AnswerAnswer: D
When running the command shown below, what is the default path in which deployment server. conf is created?
When running the command shown below, what is the default path in which deployment server. conf is created? splunk set deploy-poll deployServer:portA . SFLUNK_HOME/etc/deploymentB . SPLUNK_HOME/etc/system/localC . SPLUNK_HOME/etc/system/defaultD . SPLUNK_KOME/etc/apps/deploymentView AnswerAnswer: B
The universal forwarder has which capabilities when sending data? (select all that apply)
The universal forwarder has which capabilities when sending data? (select all that apply)A . Sending alertsB . Compressing dataC . Obfuscating/hiding dataD . Indexer acknowledgementView AnswerAnswer: B,D Explanation: https://docs.splunk.com/Documentation/Splunk/8.0.1/Forwarding/Aboutforwardingandrecei vingdata
Who provides the Application Secret, Integration, and Secret keys, as well as the API Hostname when setting up Duo for Multi-Factor Authentication in Splunk Enterprise?
Who provides the Application Secret, Integration, and Secret keys, as well as the API Hostname when setting up Duo for Multi-Factor Authentication in Splunk Enterprise?A . Duo AdministratorB . LDAP AdministratorC . SAML AdministratorD . Trio AdministratorView AnswerAnswer: A Explanation: Reference: https://duo.com/docs/splunk
For single line event sourcetypes. it is most efficient to set SHOULD_linemerge to what value?
For single line event sourcetypes. it is most efficient to set SHOULD_linemerge to what value?A . TrueB . FalseC . <regex string>D . Newline CharacterView AnswerAnswer: B
Which Splunk component performs indexing and responds to search requests from the search head?
Which Splunk component performs indexing and responds to search requests from the search head?A . ForwarderB . Search peerC . License masterD . Search head clusterView AnswerAnswer: B
What conf file needs to be edited to set up distributed search groups?
What conf file needs to be edited to set up distributed search groups?A . props.confB . search.confC . distsearch.confD . distibutedsearch.confView AnswerAnswer: C Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/8.0.5/DistSearch/Distributedsearchgroups
What is the valid option for a [monitor] stanza in inputs.conf?
What is the valid option for a [monitor] stanza in inputs.conf?A . enabledB . datasourceC . server_nameD . ignoreOlderThanView AnswerAnswer: D Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/8.0.5/Data/Monitorfilesanddirectorieswithinputs.conf
After configuring a universal forwarder to communicate with an indexer, which index can be checked via the Splunk Web UI for a successful connection?
After configuring a universal forwarder to communicate with an indexer, which index can be checked via the Splunk Web UI for a successful connection?A . index=mainB . index=testC . index=summaryD . index=_internalView AnswerAnswer: D Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/8.0.5/Security/Validateyourconfiguration
