Which index-time props.conf attributes impact indexing performance? (Select all that apply.)

Which index-time props.conf attributes impact indexing performance? (Select all that apply.)
A . REPORT
B . LINE_BREAKER
C . ANNOTATE_PUNCT
D . SHOULD_LINEMERGE

View Answer

Answer: B, D

Explanation:

The index-time props.conf attributes that impact indexing performance are LINE_BREAKER and SHOULD_LINEMERGE. These attributes determine how Splunk breaks the incoming data into events and whether it merges multiple events into one. These operations can affect the indexing speed and the disk space consumption. The REPORT attribute does not impact indexing performance, as it is used to apply transforms at search time. The ANNOTATE_PUNCT attribute does not impact indexing performance, as it is used to add punctuation metadata to events at search time. For more information, see [About props.conf and transforms.conf] in the Splunk documentation.