Which tool(s) can be leveraged to diagnose connection problems between an indexer and forwarder? (Select
all that apply.)

• A.telnet
• B.tcpdump
• C.splunk btool
• D.splunk btprobe

Comment: *

Name: *

Email: *

Verification: *

When Splunk is installed, where are the internal indexes stored by default?

• A.SPLUNK_HOME/bin
• B.SPLUNK_HOME/var/lib
• C.SPLUNK_HOME/var/run
• D.SPLUNK_HOME/etc/system/default

Comment: *

Name: *

Email: *

Verification: *

To reduce the captain's work load in a search head cluster, what setting will prevent scheduled searches from running on the captain?

• A.adhoc_searchhead = true(on all members)
• B.adhoc_searchhead = true(on the current captain)
• C.captain_is_adhoc_searchhead = true(on all members)
• D.captain_is_adhoc_searchhead = true(on the current captain)

Comment: *

Name: *

Email: *

Verification: *

Which of the following describe migration from single-site to multisite index replication?

• A.A master node is required at each site.
• B.Multisite policies apply to new data only.
• C.Single-site buckets instantly receive the multisite policies.
• D.Multisite total values should not exceed any single-site factors.

Comment: *

Name: *

Email: *

Verification: *

Stakeholders have identified high availability for searchable data as their top priority. Which of the following best addresses this requirement?

• A.Increasing the number of CPUs on the indexers in the cluster.
• B.Increasing the replication factor in the cluster.
• C.Increasing the number of search heads in the cluster.
• D.Increasing the search factor in the cluster.

Comment: *

Name: *

Email: *

Verification: *