SPLK-1003 無料問題集「Splunk Enterprise Certified Admin」

（A）Deployment server

（B）Search head cluster master

（C）Cluster master

（D）Deployer

（A）[distributedSearch:Paris] default = false servers = server1:8089; server2:8089

（B）[searchGroup:Paris] default = false servers = server1:9997, server2:9997

（C）[searchGroup:Paris] default = false servers = server1:8089, server2:8089

（D）[distributedSearch:Paris] default = false servers = server1, server2

（A）forwarder.conf

（B）inputs.conf

（C）outputs.conf

（D）monitor.conf

（A）moveToFrozenAfter

（B）maxDaysToKeep

（C）frozenTimePeriodlnSecs

（D）maxDataRetentionTime

（A）Add 2.5 TB each day for the next 5 days.

（B）Add all 10 TB in a single 24 hour period.

（C）Buy a bigger Splunk license.

（D）Add 200 GB of historical data each day for 50 days.

（A）On Deployment Server, $SPLUNK_HOME/etc/apps

（B）On Universal Forwarder, $SPLUNK_HOME/etc/apps

（C）On Universal Forwarder, $SPLUNK_HOME/etc/deployment-apps

（D）On Deployment Server, $SPLUNK_HOME/etc/deployment-apps

（A）indexes.conf

（B）props.conf

（C）inpucs.conf

（D）transforms.conf

（A）App Class

（B）Forwarder Class

（C）Server Class

（D）Client Class

（A）Any OS platform

（B）Linux platform only

（C）None of the above.

（D）Windows platform only.

（A）Universal forwarder

（B）Heavy forwarder

（C）Heaviest forwarder

（D）Hyper forwarder