SPLK-2002 Practice Test

In a four site indexer cluster, which configuration stores two searchable copies at the origin site, one
searchable copy at site2, and a total of four searchable copies?

A.

site_search_factor = origin:2, site1:2, total:4

B.

site_search_factor = origin:2, site2:1, total:4

C.

site_replication_factor = origin:2, site1:2, total:4

D.

site_replication_factor = origin:2, site2:1, total:4

Which two sections can be expanded using the Search Job Inspector?

A.

Execution costs.

B.

Saved search history.

C.

Search job properties.

D.

Optimization suggestions.

When troubleshooting monitor inputs, which command checks the status of the tailed files?

A.

splunk cmd btool inputs list | tail

B.

splunk cmd btool check inputs layer

C.

curl https://serverhost:8089/services/admin/inputstatus/TailingProcessor:FileStatus

D.

curl https://serverhost:8089/services/admin/inputstatus/TailingProcessor:Tailstatus

Which of the following is a way to exclude search artifacts when creating a diag?

A.

SPLUNK_HOME/bin/splunk diag --exclude

B.

SPLUNK_HOME/bin/splunk diag --debug --refresh

C.

SPLUNK_HOME/bin/splunk diag --disable=dispatch

D.

SPLUNK_HOME/bin/splunk diag --filter-searchstrings

To improve Splunk performance, parallelIngestionPipelines setting can be adjusted on which of the following components in the Splunk architecture? (Select all that apply.)

A.

Indexers

B.

Forwarders

C.

Search head

D.

Cluster master