SPLK-2002 Practice Test

Which of the following will cause the greatest reduction in disk size requirements for a cluster of N indexers
running Splunk Enterprise Security?

A.

Setting the cluster search factor to N-1.

B.

Increasing the number of buckets per index.

C.

Decreasing the data model acceleration range.

D.

Setting the cluster replication factor to N-1.

Which Splunk server role regulates the functioning of indexer cluster? 

A.

Indexer

B.

Deployer

C.

Master Node

D.

Monitoring Console

What log file would you search to verify if you suspect there is a problem interpreting a regular expression in a
monitor stanza?

A.

btool.log

B.

metrics.log

C.

splunkd.log

D.

tailing_processor.log

Which of the following artifacts are included in a Splunk diag file? (Select all that apply.)

A.

OS settings.

B.

Internal logs.

C.

Customer data.

D.

Configuration files.

Which of the following statements describe licensing in a clustered Splunk deployment? (Select all that apply.)

A.

Free licenses do not support clustering.

B.

Replicated data does not count against licensing.

C.

Each cluster member requires its own clustering license.

D.

Cluster members must share the same license pool and license master.