Question 76

When configuring HTTP Event Collector (HEC) input, how would one ensure the events have been indexed?
  • Question 77

    In which phase do indexed extractions in props.conf occur?
  • Question 78

    In a distributed environment, which Splunk component is used to distribute apps and configurations to the other Splunk instances?
  • Question 79

    User role inheritance allows what to be inherited from the parent role? (select all that apply)
  • Question 80

    Which valid bucket types are searchable? (Choose all that apply.)