What conf file needs to be edited to set up distributed search groups?
Which of the following applies only to Splunk index data integrity check?
Which setting allows the configuration of Splunk to allow events to span over more than one line?
Which default Splunk role could be assigned to provide users with the following capabilities?
Create saved searches
Edit shared objects and alerts
Not allowed to create custom roles
Which Splunk component consolidates the individual results and prepares reports in a distributed environment?
