Which of the following is not a path used by Splunk to execute scripts?

• A.SPLUNK_HOME/etc/system/bin
• B.SPLUNK HOME/etc/appa/<app name>/bin
• C.SPLUNKHOMS/ctc/scripts/local
• D.SPLUNK_HOME/bin/scripts

Comment: *

Name: *

Email: *

Verification: *

What information is identified during the input phase of the ingestion process?

• A.Line breaking and timestamp.
• B.A hash of the message payload.
• C.Metadata fields like sourcetype and host.
• D.SRC and DST IP addresses and ports.

Comment: *

Name: *

Email: *

Verification: *

In Splunk Cloud, which of the following statements regarding REST API is true?

• A.REST API and Splunk HEC are on the same port.
• B.All REST API endpoints are open and available by default.
• C.REST API is not available in Splunk Cloud.
• D.A subset of REST API endpoints are enabled for customers to manage Splunk.

Comment: *

Name: *

Email: *

Verification: *

What is the name of the configuration file where you can specify the source type for a data input?

• A.props.conf
• B.inputs.conf
• C.transforms.conf
• D.limits.conf

Comment: *

Name: *

Email: *

Verification: *

A Splunk Cloud administrator is looking to allow a new group of Splunk users in the marketing department to access the Splunk environment and view a dashboard with relevant data. These users need to access marketing data (stored in the marketing_data index), but shouldn't be able to access other data, such as events related to security or operations.
Which approach would be the best way to accomplish these requirements?

• A.Create a new user with access to the marketing_data index assigned.
• B.Create a new role that inherits the user role and remove the capability to search indexes other than marketing_data.
• C.Create a new role that inherits the admin rote and assign access to the marketing_dat.a index.
• D.Create a new role that does not inherit from any other role, turn on the same capabilities as the user role, and assign access to the marketing_data index.

Comment: *

Name: *

Email: *

Verification: *