A customer wants to implement LDAP because managing local Splunk users is becoming too much of an overhead. What configuration details are needed from the customer to implement LDAP authentication?
When adding a new search head to a search head cluster (SHC), which of the following scenarios occurs?
For indexer clustering, what options exist for pre-migration buckets when performing a single-site to multisite migration?
A customer has implemented their own Role Based Access Control (RBAC) model to attempt to give the Security team different data access than the Operations team by creating two new Splunk roles "" security and operations. In the srchIndexesAllowed setting of authorize.conf, they specified the network index under the security role and the operations index under the operations role. The new roles are set up to inherit the default user role.
If a new user is created and assigned to the operations role only, which indexes will the user have access to search?
Which of the following server roles should be configured for a host which indexes its internal logs locally?
