Multiple Choice
Which setting in indexes.conf allows data retention to be controlled by time?
A) maxDaysToKeep
B) moveToFrozenAfter
C) maxDataRetentionTime
D) frozenTimePeriodInSecs
Correct Answer:
Verified
Correct Answer:
Verified
Related Questions
Q8: Where are license files stored?<br>A) $SPLUNK_HOME/etc/secure<br>B) $SPLUNK_HOME/etc/system<br>C)
Q9: Which of the following are methods for
Q10: How can native authentication be disabled in
Q11: How would you configure your distsearch.conf to
Q12: Which is a valid stanza for a
Q14: Within props.conf , which stanzas are valid
Q15: Which of the following statements describe deployment
Q16: The volume of data from collecting log
Q17: Which configuration files are used to transform
Q18: What is required when adding a native