Due to internal security policies, a Splunk Cloud administrator cannot send data directly to Splunk Cloud from certain data sources. Additional parsing and API-based data sources also need to be sent to Splunk Cloud. What forwarder type should the Splunk Cloud administrator use to satisfy these requirements within their environment?

Question

Fatmata Kabba · Accepted Answer

Heavy forwarder as an intermediate forwarder

Fatmata Kabba · Answer

Syslog-ng server with a universal forwarder

Fatmata Kabba · Answer

Light forwarder as an intermediate forwarder

Fatmata Kabba · Answer

Universal forwarder as an intermediate forwarder

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 77 - SPLK-1005 discussion

Suggested answer: C

0 comments