Splunk SPLK-1003 Splunk Enterprise Certified Admin Exam Practice Test

Page: 1 / 14
Total 138 questions

Question 1

Which of the following are reasons to create separate indexes? (Choose all that apply.)



Answer : A, D

Question 2

In this example, if useACK is set to true and the maxQueueSize is set to 7MB, what is the size of the wait queue on this universal forwarder?



Answer : A

Question 3

Which setting allows the configuration of Splunk to allow events to span over more than one line?



Answer : C

Question 4

Consider the following stanza in inputs.conf:

What will the value of the source filed be for events generated by this scripts input?



Answer : A

Question 5

What happens when the same username exists in Splunk as well as through LDAP?



Answer : C

Question 6

After automatic load balancing is enabled on a forwarder, the time interval for switching indexers can be updated by using which of the following attributes?



Answer : C

Question 7

The LINE_BREAKER attribute is configured in which configuration file?



Answer : A

Page:    1 / 14   
Total 138 questions