QUESTION: 29

In which of the following scenarios should base configurations be used to provide consistent, repeatable, and supportable configurations?

For non-production environments to keep their configurations in sync.
To ensure every customer has exactly the same base settings.
To provide settings that do not need to be customized to meet customer requirements.
To provide settings that can be customized to meet customer requirements.

Answer(s): C

Reference:

https://docs.splunk.com/Documentation/Splunk/latest/Admin/Wheretofindtheconfigurationfiles

Reveal Solution Next Question

QUESTION: 30

Data can be onboarded using apps, Splunk Web, or the CLI. Which is the PS preferred method?

Create UDP input port 9997 on a UF.
Use the add data wizard in Splunk Web.
Use the inputs.conf file.
Use a scripted input to monitor a log file.

Answer(s): B

Reference:

https://docs.splunk.com/Documentation/Splunk/8.1.0/Data/Howdoyouwanttoadddata

Reveal Solution Next Question

QUESTION: 31

Which of the following statements applies to indexer discovery?

The Cluster Master (CM) can automatically discover new indexers added to the cluster.
Forwarders can automatically discover new indexers added to the cluster.
Deployment servers can automatically configure new indexers added to the cluster.
Search heads can automatically discover new indexers added to the cluster.

Answer(s): D

Reference:

https://docs.splunk.com/Documentation/Splunk/8.1.0/DistSearch/Connectclustersearchheadstosearchpeers

Reveal Solution Next Question

The data in Splunk is now subject to auditing and compliance controls. A customer would like to ensure that at least one year of logs are retained for both Windows and Firewall events. What data retention controls must be configured?

maxTotalDataSizeMB and frozenTimePeriodInSecs
coldToFrozenDir and coldToFrozenScript
Splunk Volume and maxTotalDataSizMB
Splunk Volume and frozenTimePeriodInSecs

Answer(s): A

Reference:

https://docs.splunk.com/Documentation/Splunk/8.1.0/Indexer/Setaretirementandarchivingpolicy

Reveal Solution Next Question

Free SPLK-3003 Exam Braindumps (page: 9)

QUESTION: 29

Reference:

QUESTION: 30

Reference:

QUESTION: 31

Reference:

QUESTION: 32

Reference:

Exam Discussions & Posts