SPLK-2002Preview

Which of the following are client filters available in serverclass.conf? (Select all that apply.)

What log file would you search to verify if you suspect there is a problem interpreting a regular expression in a monitor stanza?

Which Splunk tool offers a health check for administrators to evaluate the health of their Splunk deployment?

In a four site indexer cluster, which configuration stores two searchable copies at the origin site, one searchable copy at site2, and a total of four searchable copies?

Which Splunk Enterprise offering has its own license?

Which component in the splunkd.log will log information related to bad event breaking?

Which Splunk server role regulates the functioning of indexer cluster?

When adding or rejoining a member to a search head cluster, the following error is displayed:
Error pulling configurations from the search head cluster captain; consider performing a destructive configuration resync on this search head cluster member.
What corrective action should be taken?

Which of the following commands is used to clear the KV store?

Stakeholders have identified high availability for searchable data as their top priority. Which of the following best addresses this requirement?

Indexing is slow and real-time search results are delayed in a Splunk environment with two indexers and one search head. There is ample CPU and memory available on the indexers. Which of the following is most likely to improve indexing performance?

The guidance Splunk gives for estimating size on for syslog data is 50% of original data size. How does this divide between files in the index?

A three-node search head cluster is skipping a large number of searches across time. What should be done to increase scheduled search capacity on the search head cluster?

The frequency in which a deployment client contacts the deployment server is controlled by what?

To activate replication for an index in an indexer cluster, what attribute must be configured in indexes.conf on all peer nodes?

Which of the following clarification steps should be taken if apps are not appearing on a deployment client? (Select all that apply.)

Which of the following security options must be explicitly configured (i.e. which options are not enabled by default)?