SPLK-1005 exam

Which setting in inputs.conf can be used to specify the command to run the script for a scripted input?A . script B. command C. exec D. runView AnswerAnswer: C

Which command can be used to install a universal forwarder on a Linux system?A . splunk install forwarder B. splunk forwarder install C. splunk add forward-server D. splunk enable boot-startView AnswerAnswer: A

Which type of forwarder can perform data parsing and enrichment before sending it to the indexer?A . Universal forwarder B. Heavy forwarder C. Deployment server D. Search headView AnswerAnswer: B

What is the name of the Splunk Cloud feature that allows you to get data from APIs and other remote data interfaces through scripted inputs?A . Splunk Cloud Data Connectors B. Splunk Cloud Data Integrations C. Splunk Cloud Data Collectors D. Splunk Cloud Data SourcesView AnswerAnswer: C

What is the name of the configuration file where you can specify the source type for a data input?A . limits.conf B. props.conf C. inputs.conf D. transforms.confView AnswerAnswer: C

Which file processor can be used to index files that are not actively written to or updated?A . Monitor B. MonitornoHandle C. Upload D. None of the aboveView AnswerAnswer: C

What is the name of the attribute that specifies the sed script for data transformation in the props.conf file?A . SEDCMD B. FORMAT C. DEST_KEY D. TRANSFORMSView AnswerAnswer: A

Which type of forwarder can act as an intermediate forwarder to receive data from other forwarders and send it to the indexer?A . Universal forwarder B. Heavy forwarder C. Light forwarder D. Any type of forwarderView AnswerAnswer: B

Which type of forwarder is a full Splunk Enterprise instance that can run apps and add-ons?A . Universal forwarder B. Heavy forwarder C. Deployment server D. Search headView AnswerAnswer: B

Which Splunk add-on simplifies the process of getting data into Splunk Cloud Platform from Windows Event Log channels?A . Splunk Add-on for Windows B. Splunk Add-on for Infrastructure C. Splunk Add-on for Active Directory D. Splunk Add-on for DNSView AnswerAnswer: A