Windows Input types are collected in Splunk via a script which is configurable using the GUI. What is this type of input called?

• A.Batch
• B.Scripted
• C.Modular
• D.Front-end

Comment: *

Name: *

Email: *

Verification: *

What is the name of the default field that stores the timestamps in UNIX time when data is indexed?

• A._time
• B._timestamp
• C._epoch
• D._date

Comment: *

Name: *

Email: *

Verification: *

Which command can be used to install a universal forwarder on a Linux system?

• A.splunk enable boot-start
• B.splunk add forward-server
• C.splunk forwarder install
• D.splunk install forwarder

Comment: *

Name: *

Email: *

Verification: *

A monitor has been created in inputs. con: for a directory that contains a mix of file types.
How would a Cloud Admin fine-tune assigned sourcetypes for different files in the directory during the input phase?

• A.On the Indexer parsing the data, leave sourcetype as automatic for the directory monitor. Then create a props.conf that assigns a specific sourcetype by source stanza.
• B.On the forwarder collecting the data, leave sourcetype as automatic for the directory monitor. Then create a props. conf that assigns a specific sourcetype by source stanza.
• C.On the Indexer parsing the data, set multiple sourcetype_source attributes for the directory monitor collecting the files. Then create a props, com that filters out unwanted files.
• D.On the forwarder collecting the data, set multiple 3ourcotype_source attributes for the directory monitor collecting the files. Then create a props. conf that filters out unwanted files.

Comment: *

Name: *

Email: *

Verification: *

When monitoring network inputs, there will be times when the forwarder is unable to send data to the indexers. Splunk uses a memory queue and a disk queue. Which setting is used for the disk queue?

• A.queueSize
• B.maxQeueSize
• C.diskQiioiioiiizo
• D.persistentQueueSize

Comment: *

Name: *

Email: *

Verification: *