Which of the following configuration files are used with a universal forwarder? (Choose all that apply.)

• A.inputs.conf
• B.monitor.conf
• C.outputs.conf
• D.forwarder.conf

Comment: *

Name: *

Email: *

Verification: *

What options are available when creating custom roles? (select all that apply)

• A.Whitelist search terms
• B.Limit the number of concurrent search jobs
• C.Allow or restrict indexes that can be searched.
• D.Restrict search terms

Comment: *

Name: *

Email: *

Verification: *

When configuring HTTP Event Collector (HEC) input, how would one ensure the events have been indexed?

• A.Enable indexer acknowledgment.
• B.Enable forwarder acknowledgment.
• C.splunk check-integrity -index <index name>
• D.index=_internal component=ACK | stats count by host

Comment: *

Name: *

Email: *

Verification: *

Which of the following is accurate regarding the input phase?

• A.Performs character encoding.
• B.Fine-tunes metadata.
• C.Breaks data into events with timestamps.
• D.Applies event-level transformations.

Comment: *

Name: *

Email: *

Verification: *

Local user accounts created in Splunk store passwords in which file?

• A.$ SPLUNK HCME/etc/users/authentication.conf
• B.$ S?LUNK_HCME/etc/users/passwd.conf
• C.$ SFLUNK_KCME/etc/authentication
• D.$ SFLUNK_KOME/etc/passwd

Comment: *

Name: *

Email: *

Verification: *