What options are available when creating custom roles? (Select all that apply.)
The priority of layered Splunk configuration files depends on the file's:
If an update is made to an attribute in inputs.conf on a universal forwarder, on which Splunk component would the fishbucket need to be reset in order to reindex the data?
Which Splunk component performs indexing and responds to search requests from the search head?