ExamGecko
Question list
Search
Search

List of questions

Search

Question 71 - SPLK-1005 discussion

Report
Export

Which of the following is a valid method to test if a forwarder can successfully send data to Splunk Cloud?

A.

Search the _audit index to confirm whether the forwarder ID was registered.

Answers
A.

Search the _audit index to confirm whether the forwarder ID was registered.

B.

Use oneshot from the CLI on the forwarders, then check to see if those logs show up in the Splunk Cloud environment.

Answers
B.

Use oneshot from the CLI on the forwarders, then check to see if those logs show up in the Splunk Cloud environment.

C.

On Splunk Cloud UI, click Add Data and upload a test file, then search to see if the logs show up.

Answers
C.

On Splunk Cloud UI, click Add Data and upload a test file, then search to see if the logs show up.

D.

Ping the inputssl.example.splunkcloud.com to see if it returns the ping.

Answers
D.

Ping the inputssl.example.splunkcloud.com to see if it returns the ping.

Suggested answer: B

Explanation:

Using the oneshot command allows a direct check for data reception in the cloud environment. Logs can be verified in the cloud after the forwarder sends them. [Reference: Splunk Docs on testing forwarder data inputs]

asked 13/11/2024
Debaparna Bandyopadhyay
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first