Which Splunk component distributes apps and certain other configuration updates to search head cluster members?

• A.Deployer
• B.Cluster master
• C.Deployment server
• D.Search head cluster master

Comment: *

Name: *

Email: *

Verification: *

Which of the following are supported configuration methods to add inputs on a forwarder? (Choose all that apply.)

• A.CLI
• B.Edit inputs.conf
• C.Edit forwarder.conf
• D.Forwarder Management

Comment: *

Name: *

Email: *

Verification: *

An admin is running the latest version of Splunk with a 500 GB license. The current daily volume of new data is 300 GB per day. To minimize license issues, what is the best way to add 10 TB of historical data to the index?

• A.Buy a bigger Splunk license.
• B.Add 2.5 TB each day for the next 5 days.
• C.Add all 10 TB in a single 24 hour period.
• D.Add 200 GB of historical data each day for 50 days.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the use case for the deployment server feature of Splunk?

• A.Managing distributed workloads in a Splunk environment.
• B.Automating upgrades of Splunk forwarder installations on endpoints.
• C.Orchestrating the operations and scale of a containerized Splunk deployment.
• D.Updating configuration and distributing apps to processing components, primarily forwarders.

Comment: *

Name: *

Email: *

Verification: *

Which setting in indexes.confallows data retention to be controlled by time?

• A.maxDaysToKeep
• B.cmoveToFrozenAfter
• C.maxDataRetentionTime
• D.frozenTimePeriodInSecs

Comment: *

Name: *

Email: *

Verification: *