SPLK-2002 Practice Test

Configurations from the deployer are merged into which location on the search head cluster member?

A.

SPLUNK_HOME/etc/system/local

B.

SPLUNK_HOME/etc/apps/APP_HOME/local

C.

SPLUNK_HOME/etc/apps/search/default

D.

SPLUNK_HOME/etc/apps/APP_HOME/default

Which index-time props.conf attributes impact indexing performance? (Select all that apply.)

A.

REPORT

B.

LINE_BREAKER

C.

ANNOTATE_PUNCT

D.

SHOULD_LINEMERGE

Which Splunk Enterprise offering has its own license?

A.

Splunk Cloud Forwarder

B.

Splunk Heavy Forwarder

C.

Splunk Universal Forwarder

D.

Splunk Forwarder Management

Which of the following commands is used to clear the KV store?

A.

splunk clean kvstore

B.

splunk clear kvstore

C.

splunk delete kvstore

D.

splunk reinitialize kvstore

Which search will show all deployment client messages from the client (UF)?

A.

index=_audit component=DC* host=<ds> | stats count by message

B.

index=_audit component=DC* host=<uf> | stats count by message

C.

index=_internal component= DC* host=<uf> | stats count by message

D.

index=_internal component=DS* host=<ds> | stats count by message