Question 1

Load balancing on a Universal Forwarder is not scaling correctly. The forwarder's outputs. and the tcpoutstanza are setup correctly. What else could be the cause of this scaling issue? (select all that apply)

Options :

A : The receiving port is not properly setup to listen on the right port

B : The inputs . conf'S _SYSZOG_ROVTING is not setup to use the right group names.

C : The DNS record used is not setup with a valid list of IP addresses.

D : The indexAndForward value is not set properly.

Answer: A,C

Question 2

Running this search in a distributed environment:

On what Splunk component does the eval command get executed?

Options :

A : Heavy Forwarders

B : Universal Forwarders

C : Search peers

D : Search heads

Answer: C

Question 3

Which Splunk configuration file is used to enable data integrity checking?

Options :

A : props.conf

B : global.conf

C : indexes.conf

D : data_integrity.conf

Answer: C

Question 4

Using the CLI on the forwarder, how could the current forwarder to indexer configuration be viewed?

Options :

A : splunk btool server list --debug

B : splunk list forward-indexer

C : splunk list forward-server

D : splunk btool indexes list --debug

Answer: C

Question 5

When would the following command be used?

Options :

A : To verify' the integrity of a local index.

B : To verify the integrity of a SmartStore index.

C : To verify the integrity of a SmartStore bucket.

D : To verify the integrity of a local bucket.

Answer: D

Smartly Prepare Exam with Free Online SPLK-1003 Practice Test

Buying Options: