SPLK-2002: Splunk Enterprise Certified ArchitectDemo

Question

Which of these statements about integration with third-party systems are true? (Select all that apply.)

Choose three

A A Hadoop application can search data in Splunk.
B Splunk can search data in the Hadoop File System (HDFS).
C You can use Splunk alerts to provision actions on a third-party system.
D You can forward data from Splunk forwarder to a third-party system without indexing it first.

Explanation

Splunk can search Hadoop filesystem data through Hadoop-backed virtual indexes. Alert actions, such as webhooks and custom alert actions, can trigger activity in external systems. A Splunk forwarder can transmit raw data directly to a non-Splunk destination, without locally indexing that data first.

Learn more

SPLK-2002: Splunk Enterprise Certified ArchitectDemo

AstroTutor

Notes

Readiness

QuestionQ71

Community Discussion