A Splunk administrator has been tasked with developing a retention strategy to have frequently accessed data sets on SSD storage and to have older, less frequently accessed data on slower NAS storage. They have set a mount point for the NAS. Which parameter do they need to modify to set the path for the older, less frequently accessed data in indexes.conf?

• A.homepath
• B.thawedPath
• C.summaryHomePath
• D.colddeath

Comment: *

Name: *

Email: *

Verification: *

A user recently installed an application to index NCINX access logs. After configuring the application, they realize that no data is being ingested. Which configuration file do they need to edit to ingest the access logs to ensure it remains unaffected after upgrade?

• A.Option A
• B.Option B
• C.Option C
• D.Option D

Comment: *

Name: *

Email: *

Verification: *

In this source definition the MAX_TIMESTAMP_LOOKHEAD is missing. Which value would fit best?

Event example:

• A.MAX_TIMESTAMP_L0CKAHEAD = 5
• B.MAX_TIMESTAMP_LOOKAHEAD - 10
• C.MAX_TIMESTAMF_LOOKHEAD = 20
• D.MAX TIMESTAMP LOOKAHEAD - 30

Comment: *

Name: *

Email: *

Verification: *

Seven different network switches are sending traffic to a server hosting a Universal Forwarder. Three of the devices are sending TCP data and four of the devices are sending UDP data.
What is the minimum number of input stanzas that must be created on the Universal Forwarder to successfully capture data from all seven sources?

• A.One
• B.Seven
• C.Four
• D.Two

Comment: *

Name: *

Email: *

Verification: *

After configuring a universal forwarder to communicate with an indexer, which index can be checked via the Splunk Web UI for a successful connection?
index=main

• A.index=test
• B.index=summary
• C.index=_internal

Comment: *

Name: *

Email: *

Verification: *