Which of the following Splunk components require a separate installation package?
Windows can prevent a Splunk forwarder from reading open files. If files need to be read while they are being written to, what type of input stanza needs to be created?
Search heads in a company ' s European offices need to be able to search data in their New York offices. They also need to restrict access to certain indexers. What should be configured to allow this type of action?
You update a props. conf file while Splunk is running. You do not restart Splunk and you run this command: splunk btoo1 props list —debug. What will the output be?
Which Splunk forwarder type allows parsing of data before forwarding to an indexer?
Where can scripts for scripted inputs reside on the host file system? (select all that apply)
When deploying apps, which attribute in the forwarder management interface determines the apps that clients install?
What is the importance of modifying Transparent Huge Pages (THP) and ulimit settings when installing Splunk Enterprise?
