QUESTION: 17

Which component in the splunkd.log will log information related to bad event breaking?

Audittrail
EventBreaking
IndexingPipeline
AggregatorMiningProcessor

Answer(s): D

Reference:

https://answers.splunk.com/answers/141721/error-in-splunkd-log-breaking-event-because-limit-of-256-has-been-exceeded.html

Reveal Solution Next Question

QUESTION: 18

Which Splunk server role regulates the functioning of indexer cluster?

Indexer
Deployer
Master Node
Monitoring Console

Answer(s): C

Reference:

https://docs.splunk.com/Documentation/Splunk/7.3.1/Deploy/Indexercluster

Reveal Solution Next Question

When adding or rejoining a member to a search head cluster, the following error is displayed:
Error pulling configurations from the search head cluster captain; consider performing a destructive configuration resync on this search head cluster member.
What corrective action should be taken?

Restart the search head.
Run the splunk apply shcluster-bundle command from the deployer.
Run the clean raft command on all members of the search head cluster.
Run the splunk resync shcluster-replicated-config command on this member.

Answer(s): B

Reveal Solution Next Question

QUESTION: 20

Which of the following commands is used to clear the KV store?

splunk clean kvstore
splunk clear kvstore
splunk delete kvstore
splunk reinitialize kvstore

Answer(s): A

Reference:

https://answers.splunk.com/answers/237859/can-i-delete-all-data-from-a-kv-store-at-once.html

Reveal Solution Next Question

Free SPLK-2002 Exam Braindumps (page: 6)

QUESTION: 17

Reference:

QUESTION: 18

Reference:

QUESTION: 19

QUESTION: 20

Reference: