CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Splunk®
  5. SPLK-2002

Free SPLK-2002 Exam Braindumps (page: 4)

Page 3 of 23
PDF with 160 Questions

A multi-site indexer cluster can be configured using which of the following? (Select all that apply.)

  1. Via Splunk Web.
  2. Directly edit SPLUNK_HOME/etc/system/local/server.conf
  3. Run a splunk edit cluster-config command from the CLI.
  4. Directly edit SPLUNK_HOME/etc/system/default/server.conf

Answer(s): A,B


Reference:

https://docs.splunk.com/Documentation/Splunk/7.3.2/Indexer/Enableclustersindetail



Which index-time props.conf attributes impact indexing performance? (Select all that apply.)

  1. REPORT
  2. LINE_BREAKER
  3. ANNOTATE_PUNCT
  4. SHOULD_LINEMERGE

Answer(s): B,D


Reference:

https://docs.splunk.com/Documentation/Splunk/7.3.2/Data/Configureeventlinebreaking



Which of the following are client filters available in serverclass.conf? (Select all that apply.)

  1. DNS name.
  2. IP address.
  3. Splunk server role.
  4. Platform (machine type).

Answer(s): A,B


Reference:

https://docs.splunk.com/Documentation/Splunk/7.3.1/Updating/Filterclients#Define_filters_through_serverclass.conf



What log file would you search to verify if you suspect there is a problem interpreting a regular expression in a monitor stanza?

  1. btool.log
  2. metrics.log
  3. splunkd.log
  4. tailing_processor.log

Answer(s): C


Reference:

https://answers.splunk.com/answers/479312/how-to-edit-inputsconf-to-monitor-multiple-files-w-1.html






Post your Comments and Discuss Splunk® SPLK-2002 exam with other Community members:

SPLK-2002 Discussions & Posts