Splunk Enterprise Certified Admin
SPLK-1003 Exam

User role inheritance allows what to be inherited from the parent role? (Select all that apply.)

  1. Parents
  2. Capabilities
  3. Index access
  4. Search history

Answer(s): B


Reference:

https://docs.splunk.com/Documentation/Splunk/7.3.1/Security/Aboutusersandroles#How_users_inherit_capabilities



Which of the following statements apply to directory inputs? (Select all that apply.)

  1. All discovered text files are consumed.
  2. Compressed files are ignored by default.
  3. Splunk recursively traverses through the directory structure.
  4. When adding new log files to a monitored directory, the forwarder must be restarted to take them into account.

Answer(s): C


Reference:

https://answers.splunk.com/answers/133875/recursive-monitoring-of-directories.html



How would you configure your distsearch.conf to allow you to run the search below?
sourcetype=access_combined status=200 action=purchase splunk_server_group=HOUSTON

  1. [distributedSearch:NYC]
    default = false
    servers = nyc1:8089, nyc2:8089
    [distributedSearch:HOUSTON]
    default = false
    servers = houston1:8089, houston2:8089
  2. [distributedSearch]
    servers =nyc1, nyc2, houston1, houston2
    [distributedSearch:NYC]
    default = false
    servers = nyc1, nyc2
    [distributedSearch:HOUSTON]
    default = false
    servers = houston1, houston2
  3. [distributedSearch]
    servers =nyc1:8089, nyc2:8089, houston1:8089, houston2:8089
    [distributedSearch:NYC]
    default = false
    servers = nyc1:8089, nyc2:8089
    [distributedSearch:HOUSTON]
    default = false
    servers = houston1:8089, houston2:8089
  4. [distributedSearch]
    servers =nyc1:8089; nyc2:80893; houston1:8089; houston2:8089
    [distributedSearch:NYC]
    default = false
    servers = nyc1:8089; nyc2:8089
    [distributedSearch:HOUSTON]
    default = false
    servers = houston1:80897706; houston2:80898350

Answer(s): D



Which of the following is a valid distributed search group?

  1. [distributedSearch:Paris]
    default = false
    servers = server1, server2
  2. [searchGroup:Paris]
    default = false
    servers = server1:8089, server2:8089
  3. [searchGroup:Paris]
    default = false
    servers = server1:9997, server2:9997
  4. [distributedSearch:Paris]
    default = false
    servers = server1:8089; server2:8089

Answer(s): D


Reference:

https://docs.splunk.com/Documentation/Splunk/7.3.1/DistSearch/Distributedsearchgroups




Xiwan W
Great Price....Great Product. Keep up the good work!
- China
Upvote


Ashwin
So far your practice exams are extremely helpful. My test scores keep on going up every time I do them and I feel very confident now.
- India
Upvote


Mike M
The exams was excellent and helped me pass without any doubt.Very helpful! Thank you! I passed!
- UNITED ARAB EMIRATES
Upvote


Smart one
You guys rock. I just passed my 920-139 exam with 929 marks. Thanks for accurate & descriptive question bank.
- UK
Upvote


C J
Just to let you know, I passed my exam. Thank you,
- Mexico
Upvote


Mr. P
I just have to say a big thank you to you guys... i passed 70-552 exams with 896. You guys are the bomb! Keep the faith and the flag of being good. A big thank you once again.(10Q ALL).
- GERMANY
Upvote


Darwin
I passed the Novell 640-822 exam on this last Thursday after using your online test and IPad. This is my first experience with your exams. I'll be using your material from now on. In a few days I'll purchase my last study material for the C
- France
Upvote


Bila
Thanks! I passed 070-284 with 880 070-219 next to complete my MCSE.
- Colorado
Upvote


Passed
I just took my Certification testing for 10-184 Microsoft CRM Installation and Configuration. Your test questions definitely covered the essence of the exam material and I easily passed the exam.
- UNITED STATES
Upvote


Ed
I passed the IBM exam successfully
- UNITED STATES
Upvote

Read more ...