Weekend Sale - Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sntaclus

Which of the following is the default bandwidth limit in the Splunk Universal Forwarder credentials package?

A.

0KBps

B.

256 KBps

C.

512 KBps

D.

1024 KBps

Which of the following app installation scenarios can be achieved without involving Splunk Support?

A.

Deploy premium apps.

B.

Install apps via the Request Install button.

C.

Install apps via self-service.

D.

Install apps that have not gone through the vetting process.

Where does the regex replacement processor run?

A.

Merging pipeline

B.

Typing pipeline

C.

Index pipeline

D.

Parsing pipeline

In what scenarios would transforms.conf be used?

A.

Per-Event Index Routing, Applying Event Types, SEOCMD operations

B.

Per-Event Sourcetype, Per-Event Host Name, Per-Event Index Routing

C.

Per-Event Host Name, Per-Event Index Rooting, SEDCMD operations

D.

Per-Event Sourcetype, Per-Event Index Routing, Applying Event Types

Which of the following lists all parameters supported by the acceptFrom argument?

A.

IPv4, IPv6, CIDRs, DNS names, Wildcards

B.

IPv4, IPv6, CIDRs, DNS names

C.

CIDRs, DNS names, Wildcards

D.

IPv4. CIDRs, DNS names. Wildcards

The following Apache access log is being ingested into Splunk via a monitor input:

How does Splunk determine the time zone for this event?

A.

The value of the TZ attribute in props. cont for the a :ces3_ccwbined sourcetype.

B.

The value of the TZ attribute in props, conf for the my.webserver.example host.

C.

The time zone of the Heavy/Intermediate Forwarder with the monitor input.

D.

The time zone indicator in the raw event data.

What does the followTail attribute do in inputs.conf?

A.

Pauses a file monitor if the queue is full.

B.

Only creates a tail checkpoint of the monitored file.

C.

Ingests a file starting with new content and then reading older events.

D.

Prevents pre-existing content in a file from being ingested.

The following sample log event shows evidence of credit card numbers being present in the transactions. loc file.

Which of these SEDCM3 settings will mask this and other suspected credit card numbers with an Y character for each character being masked? The indexed event should be formatted as follows:

A)

B)

C)

D)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

In case of a Change Request, which of the following should submit a support case for Splunk Support?

A.

The party requesting the change.

B.

Certified Splunk Cloud administrator.

C.

Splunk infrastructure owner.

D.

Any person with the appropriate entitlement

Where is the recommended place to deploy input apps that are not permitted on Splunk Cloud?

A.

Universal Forwarder or Heavy Forwarder.

B.

Heavy Forwarder only.

C.

Universal Forwarder only.

D.

Apps cannot be installed on on-prem instances.