ExamGecko
Login
Home / Splunk / SPLK-2002 / List of questions
Ask Question

Splunk SPLK-2002 Practice Test - Questions Answers, Page 13

Add to Whishlist

List of questions

Question 121

Report Export Collapse

A monitored log file is changing on the forwarder. However, Splunk searches are not finding any new data that has been added. What are possible causes? (select all that apply)

Become a Premium Member for full access
  Unlock Premium Member

Question 122

Report Export Collapse

Which of the following is a problem that could be investigated using the Search Job Inspector?

Become a Premium Member for full access
  Unlock Premium Member

Question 123

Report Export Collapse

When troubleshooting a situation where some files within a directory are not being indexed, the ignored files are discovered to have long headers. What is the first thing that should be added to inputs.conf?

Become a Premium Member for full access
  Unlock Premium Member

Question 124

Report Export Collapse

In an indexer cluster, what tasks does the cluster manager perform? (select all that apply)

Become a Premium Member for full access
  Unlock Premium Member

Question 125

Report Export Collapse

New data has been added to a monitor input file. However, searches only show older data.

Which splunkd. log channel would help troubleshoot this issue?

Become a Premium Member for full access
  Unlock Premium Member

Question 126

Report Export Collapse

Determining data capacity for an index is a non-trivial exercise. Which of the following are possible considerations that would affect daily indexing volume? (select all that apply)

Become a Premium Member for full access
  Unlock Premium Member

Question 127

Report Export Collapse

Splunk Enterprise performs a cyclic redundancy check (CRC) against the first and last bytes to prevent the same file from being re-indexed if it is rotated or renamed. What is the number of bytes sampled by default?

Become a Premium Member for full access
  Unlock Premium Member

Question 128

Report Export Collapse

Users are asking the Splunk administrator to thaw recently-frozen buckets very frequently. What could the Splunk administrator do to reduce the need to thaw buckets?

Become a Premium Member for full access
  Unlock Premium Member

Question 129

Report Export Collapse

When should a dedicated deployment server be used?

Become a Premium Member for full access
  Unlock Premium Member

Question 130

Report Export Collapse

Which Splunk internal field can confirm duplicate event issues from failed file monitoring?

Become a Premium Member for full access
  Unlock Premium Member
Total 160 questions
Go to page: of 16
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which of the following statements describe search head clustering? (Select all that apply.)
Which component in the splunkd.log will log information related to bad event breaking?
What does the deployer do in a Search Head Cluster (SHC)? (Select all that apply.)
Which of the following strongly impacts storage sizing requirements for Enterprise Security?
When should a Universal Forwarder be used instead of a Heavy Forwarder?
The master node distributes configuration bundles to peer nodes. Which directory peer nodes receive the bundles?
Which of the following server. conf stanzas indicates the Indexer Discovery feature has not been fully configured (restart pending) on the Master Node? A) B) C) D)
A customer plans to ingest 600 GB of data per day into Splunk. They will have six concurrent users, and they also want high data availability and high search performance. The customer is concerned about cost and wants to spend the minimum amount on the hardware for Splunk. How many indexers are recommended for this deployment?
Search dashboards in the Monitoring Console indicate that the distributed deployment is approaching its capacity. Which of the following options will provide the most search performance improvement?
Which of the following will cause the greatest reduction in disk size requirements for a cluster of N indexers running Splunk Enterprise Security?