Which optional configuration setting in inputs .conf allows you to selectively forward the data to specific indexer(s)?

• A._TCP_ROUTING
• B._INDEXER_LIST
• C._INDEXER_GROUP
• D._INDEXER ROUTING

Comment: *

Name: *

Email: *

Verification: *

The LINE_BREAKER attribute is configured in which configuration file?

• A.indexes.conf
• B.inpucs.conf
• C.transforms.conf
• D.props.conf

Comment: *

Name: *

Email: *

Verification: *

In this example, ifuseACKis set to true and themaxQueueSizeis set to 7MB, what is the size of the wait queue on this universal forwarder?

• A.21MB
• B.28MB
• C.14MB
• D.7MB

Comment: *

Name: *

Email: *

Verification: *

Which of the following are required when defining an index in indexes. conf? (select all that apply)

• A.coldPath
• B.homePath
• C.frozenPath
• D.thawedPath

Comment: *

Name: *

Email: *

Verification: *

This file has been manually created on a universal forwarder

A new Splunk admin comes in and connects the universal forwarders to a deployment server and deploys the same app with a new

Which file is now monitored?

• A./var/log/maillog
• B.none of the above
• C./var/log/maillog and /var/log/messages
• D./var/log/messages

Comment: *

Name: *

Email: *

Verification: *