Multiple Choice
How would you configure your distsearch.conf to allow you to run the search below? sourcetype=access_combined status=200 action=purchase splunk_server_group=HOUSTON
A) [distributedSearch:NYC] default = false servers = nyc1:8089, nyc2:8089 [distributedSearch:HOUSTON] servers = houston1:8089, houston2:8089
B) [distributedSearch] servers =nyc1, nyc2, houston1, houston2 servers = nyc1, nyc2 servers = houston1, houston2
C) servers =nyc1:8089, nyc2:8089, houston1:8089, houston2:8089
D) servers =nyc1:8089; nyc2:8089; houston1:8089; houston2:8089 servers = nyc1:8089; nyc2:8089 servers = houston1:8089; houston2:8089
Correct Answer:
Verified
Correct Answer:
Verified
Q6: The universal forwarder has which capabilities when
Q7: On the deployment server, administrators can map
Q8: Where are license files stored?<br>A) $SPLUNK_HOME/etc/secure<br>B) $SPLUNK_HOME/etc/system<br>C)
Q9: Which of the following are methods for
Q10: How can native authentication be disabled in
Q12: Which is a valid stanza for a
Q13: Which setting in indexes.conf allows data retention
Q14: Within props.conf , which stanzas are valid
Q15: Which of the following statements describe deployment
Q16: The volume of data from collecting log