Which optional configuration setting in inputs .conf allows you to selectively forward the data to specific indexer(s)?
When Splunk is integrated with LDAP, which attribute can be changed in the Splunk UI for an LDAP user?
Which feature of Splunk's role configuration can be used to aggregate multiple roles intended for groups of users?
When configuring HTTP Event Collector (HEC) input, how would one ensure the events have been indexed?
