CertsTopics Logo

Labour Day Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

SPLK-1003 Splunk Exam Lab Questions

Page: 11 / 14
Total 174 questions
Get SPLK-1003 Full Access Download SPLK-1003 PDF

Splunk Enterprise Certified Admin Exam Questions and Answers

Question 41

Which of the following types of data count against the license daily quota?

Options:

A.

Replicated data

B.

splunkd logs

C.

Summary index data

D.

Windows internal logs

Question 42

Which artifact is required in the request header when creating an HTTP event?

Options:

A.

ackID

B.

Token

C.

Manifest

D.

Host name

Question 43

When running the command shown below, what is the default path in which deployment server. conf is created?

splunk set deploy-poll deployServer:port

Options:

A.

SFLUNK_HOME/etc/deployment

B.

SPLUNK_HOME/etc/system/local

C.

SPLUNK_HOME/etc/system/default

D.

SPLUNK_KOME/etc/apps/deployment

Question 44

UsingSEDCMDinprops.confallows raw data to be modified. With the given event below, which option will mask the first three digits of theAcctIDfield resulting output:[22/Oct/2018:15:50:21] VendorID=1234 Code=B AcctID=xxx5309

Event:

[22/Oct/2018:15:50:21] VendorID=1234 Code=B AcctID=xxx5309

Options:

A.

SEDCMD-1acct = s/VendorID=\d{3}(\d{4})/VendorID=xxx/g

B.

SEDCMD-xxxAcct = s/AcctID=\d{3}(\d{4})/AcctID=xxx/g

C.

SEDCMD-1acct = s/AcctID=\d{3}(\d{4})/AcctID=\1xxx/g

D.

SEDCMD-1acct = s/AcctID=\d{3}(\d{4})/AcctID=xxx\1/g

Page: 11 / 14
Total 174 questions
Get SPLK-1003 Full Access Download SPLK-1003 PDF