Which Splunk indexer operating system platform is supported when sending logs from a Windows universal forwarder?

• A.Linux platform only
• B.Windows platform only.
• C.None of the above.
• D.Any OS platform

Comment: *

Name: *

Email: *

Verification: *

An add-on has configured field aliases for source IP address and destination IP address fields. A specific user prefers not to have those fields present in their user context. Based on the default props.conf below, which SPLUNK_HOME/etc/users/buttercup/myTA/local/props.conf stanza can be added to the user's local context to disable the field aliases?

• A.Option D
• B.Option B
• C.Option A
• D.Option C

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements describes how distributed search works?

• A.Forwarders pull data from the search peers.
• B.Search heads store a portion of the searchable data.
• C.The search head dispatches searches to the search peers.
• D.Search results are replicated within the indexer cluster.

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements describe deployment management? (select all that apply)

• A.Requires an Enterprise license
• B.Is responsible for sending apps to forwarders.
• C.Once used, is the only way to manage forwarders
• D.Can automatically restart the host OS running the forwarder.

Comment: *

Name: *

Email: *

Verification: *

When enabling data integrity control, where does Splunk Enterprise store the hash files for each bucket?

• A.Splunk Enterprise stores hash files in the logdata directory of the corresponding bucket.
• B.Splunk Enterprise stores hash files in the rawdata directory of the corresponding bucket.
• C.Splunk Enterprise stores hash files in the hashdata directory of the corresponding bucket.
• D.Splunk Enterprise stores hash files in the metadata directory of the corresponding bucket.

Comment: *

Name: *

Email: *

Verification: *