Which of the following configuration files are used with a universal forwarder? (Choose all that apply.)
On the deployment server, administrators can map clients to server classes using client filters. Which of the following statements is accurate?
In which phase of the index time process does the license metering occur?
In which phase do indexed extractions in props.conf occur?
If an update is made to an attribute in inputs.conf on a universal forwarder, on which Splunk component would the fishbucket need to be reset in order to reindex the data?
