Free SPLK-1003 Exam Braindumps (page: 3)

Page 2 of 35

Which of the following are supported configuration methods to add inputs on a forwarder? (Select all that apply.)

  1. CLI
  2. Edit inputs.conf
  3. Edit forwarder.conf
  4. Forwarder Management

Answer(s): A,B


Reference:

https://docs.splunk.com/Documentation/Forwarder/7.3.1/Forwarder/
HowtoforwarddatatoSplunkEnterprise#Define_inputs_on_the_universal_forwarder_with_configuration_files



Which parent directory contains the configuration files in Splunk?

  1. $SPLUNK_HOME/etc
  2. $SPLUNK_HOME/var
  3. $SPLUNK_HOME/conf
  4. $SPLUNK_HOME/default

Answer(s): A


Reference:

https://docs.splunk.com/Documentation/Splunk/7.3.1/Admin/Configurationfiledirectories



Which forwarder type can parse data prior to forwarding?

  1. Universal forwarder
  2. Heaviest forwarder
  3. Hyper forwarder
  4. Heavy forwarder

Answer(s): D


Reference:

https://docs.splunk.com/Documentation/Splunk/7.3.1/Forwarding/Typesofforwarders



Which Splunk component consolidates the individual results and prepares reports in a distributed environment?

  1. Indexers
  2. Forwarder
  3. Search head
  4. Search peers

Answer(s): A


Reference:

https://docs.splunk.com/Documentation/Splunk/7.3.1/Indexer/Advancedindexingstrategy






Post your Comments and Discuss Splunk® SPLK-1003 exam with other Community members:

SPLK-1003 Discussions & Posts