In the diagrammed environment shown below, the customer would like the data read by the universal forwarders to set an indexed field containing the UF's host name. Where would the parsing configurations need to be installed for this to work?

• A.On all parsing Splunk instances.
• B.All heavy forwarders.
• C.All universal forwarders.
• D.Only the indexers.

Comment: *

Name: *

Email: *

Verification: *

A customer is migrating their existing Splunk Indexer from an old set of hardware to a new set of indexers. What is the earliest method to migrate the system?

• A.1. Add new indexers to the cluster as peers, in the same site (if needed). 2. Ensure new indexers receive common configuration. 3. Decommission old indexers (one at a time) to allow time for CM to fix/migrate buckets to new hardware. 4. Remove all the old indexers from the CM's list.
• B.1. Add new indexers to the cluster as new site. 2. Update cluster master (CM) server.conf to include the new available site. 3. Allow time for CM to fix/migrate buckets to new hardware. 4.Remove the old indexers from the CM's list.
• C.1. Add new indexers to the cluster as peers, to a new site. 2. Ensure new indexers receive common configuration from the CM. 3. Decommission old indexers (one at a time) to allow time for CM to fix/migrate buckets to new hardware. 4. Remove all the old indexers from the CM's list.
• D.1. Add new indexers to the cluster as peers, in the same site. 2. Update the replication factor by
  +1 to Instruct the cluster to start replicating to new peers. 3. Allow time for CM to fix/migrate buckets to new hardware. 4. Remove all the old indexers from the CM's list.

Comment: *

Name: *

Email: *

Verification: *

A [script://] input sends data to a Splunk forwarder using which method?

• A.UDP stream
• B.STDOUT/STDERR
• C.Temporary file
• D.TCP stream

Comment: *

Name: *

Email: *

Verification: *

What is the recommended maximum latency guideline Splunk documentation gives for search head cluster members' network connectivity to each other?

• A.Less than 1 ms round-trip
• B.Less than 20 ms round-trip
• C.Under 200 ms round-trip
• D.No requirement specified

Comment: *

Name: *

Email: *

Verification: *

A customer has a search cluster (SHC) of six members split evenly between two data centers (DC). The customer is concerned with network connectivity between the two DCs due to frequent outages. Which of the following is true as it relates to SHC resiliency when a network outage occurs between the two DCs?

• A.The SHC will function as expected as the SHC deployer will become the new captain until the network communication is restored.
• B.The SHC will stop all scheduled search activity within the SHC.
• C.The SHC will function as expected as the minimum required number of nodes for a SHC is 3.
• D.The SHC will function as expected as the SHC captain will fall back to previous active captain in the remaining site.

Comment: *

Name: *

Email: *

Verification: *