SPLK-1003 무료 덤프문제 온라인 액세스

Which configuration file would be used to forward the Splunk internal logs from a search head to the indexer?

• A.outputs.conf
• B.props.conf
• C.inputs.conf
• D.collections.conf

A configuration file in a deployed app needs to be directly edited. Which steps would ensure a successful deployment to clients?

• A.Make the change in $SPLUNK HOME/etc/dep10yment apps/$appName/10ca1/ on the deployment server, and the change will be automatically sent to the deployment clients.
• B.Make the change in $SPLUNK HOME/etc/apps/$appName/defau1t on the deployment server, and it will be distributed down to the clients' own local versions.
• C.Make the change in $SPLUNK HOME/etc/dep10yment apps/$appName/10ca1/ on the deployment server, and then run $SPLUNK HOME/bin/sp1unk reload deploy--server.
• D.Make the change in $SPLUNK HOME /etc/apps/$appname/local/ on any of the deployment clients, and then run the command . / splunk reload deploy-server to push that change to the deployment server.

In which Splunk configuration is the SEDCMD used?

• A.transforms.conf
• B.indexes.conf
• C.props, conf
• D.inputs.conf

Which configuration files are used to transform raw data ingested by Splunk? (Choose all that apply.)

• A.transforms.conf
• B.props.conf
• C.rawdata.conf
• D.inputs.conf

In inputs. conf, which stanza would mean Splunk was only reading one local file?

• A.[read://opt/log/crashlog/Jan27crash.txt]
• B.[monitor:/// opt/log/ crashlog/Jan27crash.txt]
• C.[monitor::/ opt/log/crashlog/Jan27crash.txt]
• D.[monitor:/// opt/log/]