ExamGecko
Question list
Search
Search

Question 12 - SPLK-1003 discussion

Report
Export

Assume a file is being monitored and the data was incorrectly indexed to an exclusive index. The index is cleaned and now the data must be reindexed. What other index must be cleaned to reset the input checkpoint information for that file?

A.
_audit
Answers
A.
_audit
B.
_checkpoint
Answers
B.
_checkpoint
C.
_introspection
Answers
C.
_introspection
D.
_thefishbucket
Answers
D.
_thefishbucket
Suggested answer: D

Explanation:

--reset Reset the fishbucket for the given key or file in the btree. Resetting the checkpoint for an active monitor input reindexes data, resulting in increased license use.

https://docs.splunk.com/Documentation/Splunk/8.1.1/Troubleshooting/CommandlinetoolsforusewithSupport

Reference: http://docshare02.docshare.tips/files/4773/47733589.pdf

asked 23/09/2024
Reinhard KOhl
38 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first