Exam Name: | Splunk Enterprise Certified Admin Exam | ||
Exam Code: | SPLK-1003 Dumps | ||
Vendor: | Splunk | Certification: | Splunk Enterprise Certified Admin |
Questions: | 174 Q&A's | Shared By: | roy |
Which optional configuration setting in inputs .conf allows you to selectively forward the data to specific indexer(s)?
Which configuration file would be used to forward the Splunk internal logs from a search head to the indexer?
In this example, ifuseACKis set to true and themaxQueueSizeis set to 7MB, what is the size of the wait queue on this universal forwarder?