SPLK-2002 Free Practice Test

Which tool(s) can be leveraged to diagnose connection problems between an indexer and forwarder? (Select all that apply.)

1. A. telnet
2. B. tcpdump
3. C. splunk btool
4. D. splunk btprobe

Correct Answer: BC

Which search head cluster component is responsible for pushing knowledge bundles to search peers, replicating configuration changes to search head cluster members, and scheduling jobs across the search head cluster?

1. A. Master
2. B. Captain
3. C. Deployer
4. D. Deployment server

Correct Answer: B

Of the following types of files within an index bucket, which file type may consume the most disk?

1. A. Rawdata
2. B. Bloom filter
3. C. Metadata (.data)
4. D. Inverted index (.tsidx)

Correct Answer: B

To activate replication for an index in an indexer cluster, what attribute must be configured in indexes.conf on all peer nodes?

1. A. repFactor = 0
2. B. replicate = 0
3. C. repFactor = auto
4. D. replicate = auto

Correct Answer: C

Indexing is slow and real-time search results are delayed in a Splunk environment with two indexers and one search head. There is ample CPU and memory available on the indexers. Which of the following is most likely to improve indexing performance?

1. A. Increase the maximum number of hot buckets in indexes.conf
2. B. Increase the number of parallel ingestion pipelines in server.conf
3. C. Decrease the maximum size of the search pipelines in limits.conf
4. D. Decrease the maximum concurrent scheduled searches in limits.conf

Correct Answer: D