Summer Certification Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Passed Exam Today SPLK-1003

Page: 7 / 16
Total 211 questions

Splunk Enterprise Certified Admin Questions and Answers

Question 25

Which is a valid stanza for a network input?

Options:

A.

[udp://172.16.10.1:9997]connection = dnssourcetype = dns

B.

[any://172.16.10.1:10001]connection_host = ipsourcetype = web

C.

[tcp://172.16.10.1:9997]connection_host = websourcetype = web

D.

[tcp://172.16.10.1:10001]connection_host = dnssourcetype = dns

Question 26

What are the values forhostandindexfor[stanza1]used by Splunk during index time, given the following configuration files?

Options:

A.

host=server1index=unixinfo

B.

host=server1index=searchinfo

C.

host=searchsvr1index=searchinfo

D.

host=unixsvr1index=unixinfo

Question 27

Assume a file is being monitored and the data was incorrectly indexed to an exclusive index. The index is

cleaned and now the data must be reindexed. What other index must be cleaned to reset the input checkpoint

information for that file?

Options:

A.

_audit

B.

_checkpoint

C.

_introspection

D.

_thefishbucket

Question 28

Which feature of Splunk’s role configuration can be used to aggregate multiple roles intended for groups of

users?

Options:

A.

Linked roles

B.

Grantable roles

C.

Role federation

D.

Role inheritance

Page: 7 / 16
Total 211 questions