Question 36
Which setting in indexes. conf allows data retention to be controlled by time?
Question 37
Which layers are involved in Splunk configuration file layering? (select all that apply)
Question 38
Which optional configuration setting in inputs .conf allows you to selectively forward the data to specific indexer(s)?
Question 39
Consider the following stanza in inputs.conf:
What will the value of the source filed be for events generated by this scripts input?
What will the value of the source filed be for events generated by this scripts input?
Question 40
Which of the following are required when defining an index in indexes.conf? (Choose all that apply.)