The universal forwarder has which capabilities when sending data? (select all that apply)

• A.Sending alerts
• B.Compressing data
• C.Obfuscating/hiding data
• D.Indexer acknowledgement

Comment: *

Name: *

Email: *

Verification: *

This file has been manually created on a universal forwarder

A new Splunk admin comes in and connects the universal forwarders to a deployment server and deploys the same app with a new

Which file is now monitored?

• A./var/log/maillog and /var/log/messages
• B./var/log/maillog
• C.none of the above
• D./var/log/messages

Comment: *

Name: *

Email: *

Verification: *

How can native authentication be disabled in Splunk?

• A.Set nativeAuthentication=false in authentication.conf
• B.Remove the $SPLUNK_HOME/etc/passwd file
• C.Create an empty $SPLUNK_HOME/etc/passwd file
• D.Set SPLUNK_AUTHENTICATION=false in splunk-launch.conf

Comment: *

Name: *

Email: *

Verification: *

In which Splunk configuration is the SEDCMD used?

• A.props, conf
• B.inputs.conf
• C.indexes.conf
• D.transforms.conf

Comment: *

Name: *

Email: *

Verification: *

Which setting in indexes. conf allows data retention to be controlled by time?

• A.maxDaysToKeep
• B.moveToFrozenAfter
• C.maxDataRetentionTime
• D.frozenTimePeriodlnSecs

Comment: *

Name: *

Email: *

Verification: *