SPLK-1003 Online Training

Question #1 Which setting in indexes. conf allows data retention to be controlled by time? A . maxDaysToKeepB . moveToFrozenAfterC . maxDataRetentionTimeD . frozenTimePeriodlnSecs Reveal Solution Hide SolutionCorrect Answer: D D Explanation: https://docs.splunk.com/Documentation/Splunk/latest/Indexer/Setaretirementandarchivingpolicy Question #2 The universal forwarder has which capabilities when sending data? (select...