Question 16

The volume of data from collecting log files from 50 Linux servers and 200 Windows servers will require multiple indexers. Following best practices, which types of Splunk component instances are needed?
  • Question 17

    What is the difference between the two wildcards ...and *for the monitor stanza in inputs.conf?
  • Question 18

    Which parent directory contains the configuration files in Splunk?
  • Question 19

    Which of the following configuration files are used with a universal forwarder? (Choose all that apply.)
  • Question 20

    Which of the following apply to how distributed search works? (select all that apply)