- All Exams Instant Download
Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)
Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)A . HostB . ServerC . SourceD . SourcetypeView AnswerAnswer: CD Explanation: Reference: https://answers.splunk.com/answers/3687/host-stanza-in-props-conf-not-being-honored-forudp-514-data-sources.html
What options are available when creating custom roles? (Choose all that apply.)
What options are available when creating custom roles? (Choose all that apply.)A . Restrict search terms.B . Whitelist search terms.C . Limit the number of concurrent search jobs.D . Allow or restrict indexes that can be searched.View AnswerAnswer: AD Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Security/Aboutusersandroles
How does the Monitoring Console monitor forwarders?
How does the Monitoring Console monitor forwarders?A . By pulling internal logs from forwarders.B . By using the forwarder monitoring add-on.C . With internal logs forwarded by forwarders.D . With internal logs forwarded by deployment server.View AnswerAnswer: A
Which Splunk component requires a Forwarder license?
Which Splunk component requires a Forwarder license?A . Search headB . Heavy forwarderC . Heaviest forwarderD . Universal forwarderView AnswerAnswer: B Explanation: Reference: https://answers.splunk.com/answers/70017/heavy-forwarder-costs-and-licenses.html
Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)
Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)A . HostB . ServerC . SourceD . SourcetypeView AnswerAnswer: CD Explanation: Reference: https://answers.splunk.com/answers/3687/host-stanza-in-props-conf-not-being-honored-forudp-514-data-sources.html
Which of the following statements describe deployment management? (Choose all that apply.)
Which of the following statements describe deployment management? (Choose all that apply.)A . Requires an Enterprise license.B . Is responsible for sending apps to forwarders.C . Once used, is the only way to manage forwarders.D . Can automatically restart the host OS running the forwarder.View AnswerAnswer: A
Which of the following are supported configuration methods to add inputs on a forwarder? (Choose all that apply.)
Which of the following are supported configuration methods to add inputs on a forwarder? (Choose all that apply.)A . CLIB . Edit inputs.confC . Edit forwarder.confD . Forwarder ManagementView AnswerAnswer: AB Explanation: Reference: https://docs.splunk.com/Documentation/Forwarder/7.3.1/Forwarder/HowtoforwarddatatoSplunkEnterprise#Define_inputs_on_the_universal_forwarder_with_configuration_files
Which file is now monitored?
This file has been manually created on a universal forwarder: /opt/splunkforwarder/etc/apps/my_TA/local/inputs.conf [monitor:///var/log/messages] sourcetype=syslog index=syslog A new Splunk admin comes in and connects the universal forwarders to a deployment server and deploys the same app with a new inputs.conf file: /opt/splunk/etc/deployment-apps/my_TA/local/inputs.conf [monitor:///var/log/maillog] sourcetype=maillog index=syslog Which file is now monitored?A . /var/log/messagesB...
Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)
Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)A . HostB . ServerC . SourceD . SourcetypeView AnswerAnswer: CD Explanation: Reference: https://answers.splunk.com/answers/3687/host-stanza-in-props-conf-not-being-honored-forudp-514-data-sources.html
Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)
Within props.conf, which stanzas are valid for data modification? (Choose all that apply.)A . HostB . ServerC . SourceD . SourcetypeView AnswerAnswer: CD Explanation: Reference: https://answers.splunk.com/answers/3687/host-stanza-in-props-conf-not-being-honored-forudp-514-data-sources.html
