Question 6
Which parent directory contains the configuration files in Splunk?
Question 7
How can native authentication be disabled in Splunk?
Question 8
You update a props. conf file while Splunk is running. You do not restart Splunk and you run this command:
splunk btoo1 props list -debug. What will the output be?
splunk btoo1 props list -debug. What will the output be?
Question 9
Which of the following enables compression for universal forwarders in outputs. conf ?
A)

B)

C)

D)

A)

B)

C)

D)

Question 10
Which Splunk component consolidates the individual results and prepares reports in a distributed environment?
