Free Splunk SPLK-1003 Exam Dumps Questions & Answers

Which is a valid stanza for a network input?

• A.  [tcp://172.16.10.1:10001]connection_host = dnssourcetype = dns
• B.  [any://172.16.10.1:10001]connection_host = ipsourcetype = web
• C.  [udp://172.16.10.1:9997]connection = dnssourcetype = dns
• D.  [tcp://172.16.10.1:9997]connection_host = websourcetype = web

A company moves to a distributed architecture to meet the growing demand for the use of Splunk. What parameter can be configured to enable automatic load balancing in the Universal Forwarder to send data to the indexers?

• A.  Splunk does not do load balancing and requires a hardware load balancer to balance traffic across the indexers.
• B.  Create one outputs . conf file for each of the server addresses in the indexing tier.
• C.  Configure the outputs . conf file to point to any server in the indexing tier and Splunk will configure the data to be sent to all of the indexers.
• D.  Set the stanza to have a server value equal to a comma-separated list of IP addresses and indexer ports for each of the indexers in the environment.

When indexing a data source, which fields are considered metadata?

• A.  time, sourcetype, source
• B.  sourcetype, source, host
• C.  source, host, time
• D.  host, raw, sourcetype

To set up a Network input in Splunk, what needs to be specified ' ?

• A.  Network protocol and MAC address.
• B.  File path.
• C.  Network protocol and port number.
• D.  Username and password

Which of the following is true when authenticating users to Splunk using LDAP?

• A.  Splunk only supports encrypted LDAP connections.
• B.  Splunk will search each LDAP strategy in the order in which they are listed in authentication.conf.
• C.  LDAP group names must match the Splunk role name defined in authorize.conf.
• D.  LDAP will take precedence over local users with the same username as defined in etc/passwd.