Which of the following are methods for adding inputs in Splunk? (select all that apply)
Answer(s): A,B,C
https://docs.splunk.com/Documentation/Splunk/8.2.2/Data/Configureyourinputs Add your data to Splunk Enterprise. With Splunk Enterprise, you can add data using Splunk Web or Splunk Apps. In addition to these methods, you also can use the following methods. -The Splunk Command Line Interface (CLI) -The inputs.conf configuration file. When you specify your inputs with Splunk Web or the CLI, the details are saved in a configuartion file on Splunk Enterprise indexer and heavy forwarder instances.
Which of the following authentication types requires scripting in Splunk?
Answer(s): D
https://answers.splunk.com/answers/131127/scripted-authentication.html Scripted Authentication: An option for Splunk Enterprise authentication. You can use an authentication system that you have in place (such as PAM or RADIUS) by configuring authentication.conf to use a script instead of using LDAP or Splunk Enterprise default authentication.
Which option accurately describes the purpose of the HTTP Event Collector (HEC)?
Answer(s): B
https://docs.splunk.com/Documentation/Splunk/8.2.2/Data/UsetheHTTPEventCollector "The HTTP Event Collector (HEC) lets you send data and application events to a Splunk deployment over the HTTP and Secure HTTP (HTTPS) protocols. HEC uses a token-based authentication model. You can generate a token and then configure a logging library or HTTP client with the token to send data to HEC in a specific format. This process eliminates the need for a Splunk forwarder when you send application events."
What is the difference between the two wildcards ... and - for the monitor stanza in inputs, conf?
Answer(s): C
https://docs.splunk.com/Documentation/Splunk/7.3.0/Data/Specifyinputpathswithwildcards... The ellipsis wildcard searches recursively through directories and any number of levels of subdirectories to find matches.If you specify a folder separator (for example, //var/log/.../file), it does not match the first folder level, only subfolders.* The asterisk wildcard matches anything in that specific folder path segment.Unlike ..., * does not recurse through subfolders.
What type of data is counted against the Enterprise license at a fixed 150 bytes per event?
Post your Comments and Discuss Splunk SPLK-1003 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SPLK-1003 content, but please register or login to continue.