SPLK-1005 Free Practice Test

What is the main difference between events indexes and metrics indexes in Splunk Cloud?

1. A. Events indexes impose minimal structure and can accommodate any kind of data, while metrics indexes use a highly structured format to handle metrics data.
2. B. Events indexes use a highly structured format to handle event-based log data, while metrics indexes impose minimal structure and can accommodate any kind of data.
3. C. Events indexes store data in compressed form, while metrics indexes store data in uncompressed form.
4. D. Events indexes store data in uncompressed form, while metrics indexes store data in compressed form.

Correct Answer: A

Which command can be used to download and install the universal forwarder software on a Linux system?

1. A. wget -O splunkforwarder-<version>-Linux-x86_64.tgz ‘https://www.splunk.com/bin/splunk/DownloadActivityServlet?architecture=x86_64&platform=linux&ve
2. B. tar xvzf splunkforwarder--Linux-x86_64.tgz -C /opt
3. C. /opt/splunkforwarder/bin/splunk start --accept-license
4. D. All of the above

Correct Answer: D

Which command can be used to install a universal forwarder on a Linux system?

1. A. splunk install forwarder
2. B. splunk forwarder install
3. C. splunk add forward-server
4. D. splunk enable boot-start

Correct Answer: A

What is the name of the configuration file that governs data inputs such as forwarders and file system monitoring?

1. A. inputs.conf
2. B. props.conf
3. C. transforms.conf
4. D. outputs.conf

Correct Answer: A

What is the name of the configuration file where you can invoke data transformations by associating them with a host, source, or source type?

1. A. limits.conf
2. B. props.conf
3. C. inputs.conf
4. D. transforms.conf

Correct Answer: B