Question 1

How does the Monitoring Console monitor forwarders?

Accepted Answer

A)  By pulling internal logs from forwarders. 
B)  By using the forwarder monitoring add-on. 
C)  With internal logs forwarded by forwarders. 
D)  With internal logs forwarder by deployment server. 
A)  By pulling internal logs from forwarders. 
B)  By using the forwarder monitoring add-on. 
C)  With internal logs forwarded by forwarders. 
D)  With internal logs forwarder by deployment server.

Question 2

Where should apps be located on the deployment server that the clients pull from?

Accepted Answer

A)  $SPLUNK_HOME/etc/apps 
B)  $SPLUNK_HOME/etc/search 
C)  $SPLUNK_HOME/etc/master-apps 
D)  $SPLUNK_HOME/etc/deployment-apps 
A)  $SPLUNK_HOME/etc/apps 
B)  $SPLUNK_HOME/etc/search 
C)  $SPLUNK_HOME/etc/master-apps 
D)  $SPLUNK_HOME/etc/deployment-apps

Question 3

To set up a network input in Splunk, what needs to be specified?

Accepted Answer

A)  File path. 
B)  Username and password. 
C)  Network protocol and port number. 
D)  Network protocol and MAC address. 
A)  File path. 
B)  Username and password. 
C)  Network protocol and port number. 
D)  Network protocol and MAC address.

Question 4

Which forwarder type can parse data prior to forwarding?

Accepted Answer

A)  Universal forwarder 
B)  Heaviest forwarder 
C)  Hyper forwarder 
D)  Heavy forwarder 
A)  Universal forwarder 
B)  Heaviest forwarder 
C)  Hyper forwarder 
D)  Heavy forwarder

How does the Monitoring Console monitor forwarders?

Where should apps be located on the deployment server that the clients pull from?

To set up a network input in Splunk, what needs to be specified?

Which forwarder type can parse data prior to forwarding?

Splunk Core Certified User

Splunk Enterprise Certified Admin

Splunk Enterprise Certified Architect

Splunk Enterprise Security Certified Admin

Splunk IT Service Intelligence Certified Admin

Splunk Core Certified Consultant

Filters

Exam 3: Splunk Certified Developer

How does the Monitoring Console monitor forwarders?

Where should apps be located on the deployment server that the clients pull from?

To set up a network input in Splunk, what needs to be specified?

Which forwarder type can parse data prior to forwarding?

Splunk Core Certified User

Splunk Enterprise Certified Admin

Splunk Enterprise Certified Architect

Splunk Enterprise Security Certified Admin

Splunk IT Service Intelligence Certified Admin

Splunk Core Certified Consultant

Filters