For single line event sourcetypes. it is most efficient to set SHOULD_linemerge to what value?

• A.True
• B.Newline Character
• C.False
• D.<regex string>

Comment: *

Name: *

Email: *

Verification: *

Which of the following are supported options when configuring optional network inputs?

• A.Metadata override, sender filtering options, network input queues (quantum queues)
• B.Metadata override, sender filtering options, network input queues (memory/persistent queues)
• C.Filename override, sender filtering options, network output queues (memory/persistent queues)
• D.Metadata override, receiver filtering options, network input queues (memory/persistent queues)

Comment: *

Name: *

Email: *

Verification: *

What is the valid option for a [monitor] stanza in inputs.conf?

• A.enabled
• B.datasource
• C.server_name
• D.ignoreOlderThan

Comment: *

Name: *

Email: *

Verification: *

Local user accounts created in Splunk store passwords in which file?

• A.$ SFLUNK_HOME/etc/passwd
• B.$ SFLUNK_HOME/etc/authentication
• C.$ S?LUNK_HOME/etc/users/passwd.conf
• D.$ SPLUNK HOME/etc/users/authentication.conf

Comment: *

Name: *

Email: *

Verification: *

Which of the following is valid distribute search group?
A)
B)

C)

D)

• A.Option D
• B.Option C
• C.option A
• D.Option B

Comment: *

Name: *

Email: *

Verification: *