Which of the following tasks should the architect perform when building a deployment plan? (Select all that apply.) A. Use case checklist. B. Install Splunk apps. C. Inventory data sources. D. Review network topology.
Because Splunk indexing is read/write intensive, it is important to select the appropriate disk storage solution for each deployment. Which of the following statements is accurate about disk storage? A. High performance SAN should never be used. B. Enable NFS…
What is the logical first step when starting a deployment plan? A. Inventory the currently deployed logging infrastructure. B. Determine what apps and use cases will be implemented. C. Gather statistics on the expected adoption of Splunk for sizing. D.…
Which of the following statements describe search head clustering? (Select all that apply.) A. A deployer is required. B. At least three search heads are needed. C. Search heads must meet the high-performance reference server requirements. D. The deployer must…
When Splunk is installed, where are the internal indexes stored by default? A. SPLUNK_HOME/bin B. SPLUNK_HOME/var/lib C. SPLUNK_HOME/var/run D. SPLUNK_HOME/etc/system/default
Which of the following options can improve reliability of syslog delivery to Splunk? (Select all that apply.) A. Use TCP syslog. B. Configure UDP inputs on each Splunk indexer to receive data directly. C. Use a network load balancer to…
What is a Splunk Job? (Select all that apply.) A. A user-defined Splunk capability. B. Searches that are subjected to some usage quota. C. A search process kicked off via a report or an alert. D. A child OS process…
Which two sections can be expanded using the Search Job Inspector? A. Execution costs. B. Saved search history. C. Search job properties. D. Optimization suggestions.
What is the default log size for Splunk internal logs? A. 10MB B. 20 MB C. 25MB D. 30MB
When configuring a Splunk indexer cluster, what are the default values for replication and search factor? A. replication_factor = 2 search_factor = 2 B. replication_factor = 2 search factor = 3 C. replication_factor = 3 search_factor = 2 D. replication_factor…