Which of the following enables compression for universal forwarders in outputs. conf ?
A)
B)
C)
D)
Assume a file is being monitored and the data was incorrectly indexed to an exclusive index. The index is cleaned and now the data must be reindexed. What other index must be cleaned to reset the input checkpoint information for that file?
In addition to single, non-clustered Splunk instances, what else can the deployment server push apps to?
Which setting allows the configuration of Splunk to allow events to span over more than one line?
Which forwarder type can parse data prior to forwarding?
