| Exam Name: | Splunk Enterprise Certified Admin | ||
| Exam Code: | SPLK-1003 Dumps | ||
| Vendor: | Splunk | Certification: | Splunk Enterprise Certified Admin |
| Questions: | 211 Q&A's | Shared By: | fox |
A Splunk administrator has been tasked with developing a retention strategy to have frequently accessed data sets on SSD storage and to have older, less frequently accessed data on slower NAS storage. They have set a mount point for the NAS. Which parameter do they need to modify to set the path for the older, less frequently accessed data in indexes.conf?
Which optional configuration setting in inputs .conf allows you to selectively forward the data to specific indexer(s)?
Which of the following is an acceptable channel value when using the HTTP Event Collector indexer acknowledgment capability?
If an update is made to an attribute in inputs.conf on a universal forwarder, on which Splunk component
would the fishbucket need to be reset in order to reindex the data?