When configuring monitor inputs with whitelists or blacklists, what is the supported method of filtering the lists?

• A.Slash notation
• B.Regular expression
• C.Irregular expression
• D.Wildcard-only expression

Comment: *

Name: *

Email: *

Verification: *

Local user accounts created in Splunk store passwords in which file?

• A.$SPLUNK_HOME/etc/passwd
• B.$SPLUNK_HOME/etc/authentication
• C.$SPLUNK_HOME/etc/users/passwd.conf
• D.$SPLUNK_HOME/etc/users/authentication.conf

Comment: *

Name: *

Email: *

Verification: *

When does a warm bucket roll over to a cold bucket?

• A.When Splunk is restarted.
• B.When the maximum warm bucket age has been reached.
• C.When the maximum warm bucket size has been reached.
• D.When the maximum number of warm buckets is reached.

Comment: *

Name: *

Email: *

Verification: *

How does the Monitoring Console monitor forwarders?

• A.By pulling internal logs from forwarders.
• B.By using the forwarder monitoring add-on
• C.With internal logs forwarded by forwarders.
• D.With internal logs forwarded by deployment server.

Comment: *

Name: *

Email: *

Verification: *

Where are deployment server apps mapped to clients?

• A.Apps tab in forwarder management interface or clientapps.conf.
• B.Clients tab in forwarder management interface or deploymentclient.conf.
• C.Server Classes tab in forwarder management interface or serverclass.conf.
• D.Client Applications tab in forwarder management interface or clientapps.conf.

Comment: *

Name: *

Email: *

Verification: *