Which layers are involved in Splunk configuration file layering? (select all that apply)

• A.Forwarder context
• B.User context
• C.Global context
• D.App context

Comment: *

Name: *

Email: *

Verification: *

In this example, if useACK is set to true and the maxQueueSize is set to 7MB, what is the size of the wait queue on this universal forwarder?

• A.28MB
• B.14MB
• C.21MB
• D.7MB

Comment: *

Name: *

Email: *

Verification: *

What is the default character encoding used by Splunk during the input phase?

• A.EBCDIC
• B.UTF-8
• C.ISO 8859
• D.UTF-16

Comment: *

Name: *

Email: *

Verification: *

When are knowledge bundles distributed to search peers?

• A.After a user logs in.
• B.When Splunk is restarted.
• C.When adding a new search peer.
• D.When a distributed search is initiated.

Comment: *

Name: *

Email: *

Verification: *

Which is a valid stanza for a network input?

• A.[tcp://172.16.10.1:9997]
  connection_host = web
  sourcetype = web
• B.[any://172.16.10.1:10001]
  connection_host = ip
  sourcetype = web
• C.[udp://172.16.10.1:9997]
  connection = dns
  sourcetype = dns
• D.[tcp://172.16.10.1:10001]
  connection_host = dns
  sourcetype = dns

Comment: *

Name: *

Email: *

Verification: *