How can native authentication be disabled in Splunk?

• A.Remove the $SPLUNK_HOME/etc/passwd file
• B.Create an empty $SPLUNK_HOME/etc/passwd file
• C.Set SPLUNK_AUTHENTICATION=false in splunk-launch.conf
• D.Set nativeAuthentication=false in authentication.conf

Comment: *

Name: *

Email: *

Verification: *

Which optional configuration setting in inputs.conf allows you to selectively forward the data to specific indexer(s)?

• A._TCP_ROUTING
• B._INDEXER_LIST
• C._INDEXER_GROUP
• D._INDEXER_ROUTING

Comment: *

Name: *

Email: *

Verification: *

What is the correct order of index time precedence?
(For each of the following, highest precedence is shown at the top and lowest precedence is shown at the bottom)
.../etc/users/local

• A..../etc/system/default
  .../etc/apps/aaa/local
  .../etc/apps/zzz/default
  .../etc/system/local
  .../etc/users/local
• B..../etc/system/local
  .../etc/apps/aaa/local
  .../etc/apps/zzz/default
  .../etc/system/default
  .../etc/system/local
• C..../etc/apps/aaa/local
  .../etc/apps/zzz/default
  .../etc/system/default
  .../etc/system/default
• D..../etc/apps/aaa/local
  .../etc/apps/zzz/default
  .../etc/system/local

Comment: *

Name: *

Email: *

Verification: *

Consider the following stanza in inputs.conf:

What will the value of the source filed be for events generated by this scripts input?

• A.liscer
• B./opt/splunk/ecc/apps/search/bin/liscer.sh
• C.liscer.sh
• D.unknown

Comment: *

Name: *

Email: *

Verification: *

Which Splunk component consolidates the individual results and prepares reports in a distributed environment?

• A.Indexers
• B.Forwarder
• C.Search head
• D.Search peers

Comment: *

Name: *

Email: *

Verification: *