Which of the following enables compression for universal forwarders in outputs. conf?

Which of the following enables compression for universal forwarders in outputs. conf?

A)

B)

C)

D)

A . Option A
B . Option B
C . Option C
D . Option D

View Answer

Answer: B

Explanation:

https://docs.splunk.com/Documentation/Splunk/latest/Admin/Outputsconf

# Compression

#

# This example sends compressed events to the remote indexer.

# NOTE: Compression can be enabled TCP or SSL outputs only.

# The receiver input port should also have compression enabled. [tcpout]

server = splunkServer.example.com:4433

compressed = true