Quiz On Splunk Basics

True

False

Index=_internal

Index=main

Both (a) and (b)

Sourcetype

False

True

Add more space to index

Add more space to Deployement server

Add more Indexers

Both (a) and (c)

Splunkweb

Splunkd and search head

Splunkd and splunkWeb

All of the above

False

True

False

True

Backup the indexer data

Backup both forwarder and Indexer data

Backup the search head data

Both (b) and (c)

Manually clear each file and force splunk instance to renindex data

Delete the index and create the new one

None of te above

"splunk clean eventdata -index _fishbucket"

True

False