Microsoft
Amazon
CompTIA
Salesforce
Cisco®
SAP
PMI
ISC
ISACA
VMware
HP
EC-Council
Palo Alto Networks
LPI
Google
Fortinet
All Vendors
  2. Home
  3. Exam List
  4. Splunk®
  5. SPLK-1003

Splunk Enterprise Certified Admin
SPLK-1003 Exam

Which setting in indexes.conf allows data retention to be controlled by time?

  1. maxDaysToKeep
  2. moveToFrozenAfter
  3. maxDataRetentionTime
  4. frozenTimePeriodInSecs

Answer(s): D


Reference:

https://docs.splunk.com/Documentation/Splunk/7.3.1/Indexer/SmartStoredataretention



The universal forwarder has which capabilities when sending data? (Select all that apply.)

  1. Sending alerts
  2. Compressing data
  3. Obfuscating/hiding data
  4. Indexer acknowledgement

Answer(s): D


Reference:

https://docs.splunk.com/Documentation/Splunk/7.3.1/Forwarding/Typesofforwarders



In case of a conflict between a whitelist and a blacklist input setting, which one is used?

  1. Blacklist
  2. Whitelist
  3. They cancel each other out.
  4. Whichever is entered into the configuration first.

Answer(s): A


Reference:

https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=8&ved=2ahUKEwj0r6Lso6bkAhUqxYUKHbWlDz4QFjAHegQIAxAC&url=http%3A%2F%2Fsplunk.training% 2Fshowpdf.asp%3Fdata% 3D789BB6B10C1B4376B548D711B4377F3F4B511B437805A8EC11B437742EA8F11B43779B6FA211B4376EA657C11B4376FC19B311B4377E2407E11B43730AF97411B4377F3F4B511B437742EA8F11B43779B6FA211B43771F822111B437731365811B43730AF97411B437789BB6B11B4376B548D711B4377F3F4B511B437805A8EC11B437742EA8F11B43779B6FA211B4376EA657C11B4376FC19B311B4377E2407E11B43732E61E211B4377F3F4B511B437742EA8F11B43779B6FA211B43771F822111B437731365811B43746D0DC011B4377549EC611B4377BED81011B437789BB6B11B4376D8B14511B437731365811B4376B548D711B4377F3F4B511B4376FC19B311B43732E61E211B4376D8B14511B4377AD23D911B437789BB6B11B43730AF97411B4373989B2C11B437386E6F511B437386E6F511B4373DF6C0811B43737532BE11B4373BC039A11B437351CA5011B43737532BE11B43730AF97411B4375BD6DD511B43730AF97411B437564E8C211B43730AF97411B437%257C2318D1%257C11649A&usg=AOvVaw2e9s-JweivuCkqTb4-Y9uW



In which Splunk configuration is the SEDCMD used?

  1. props.conf
  2. inputs.conf
  3. indexes.conf
  4. transforms.conf

Answer(s): A


Reference:

https://answers.splunk.com/answers/212128/why-sedcmd-configured-in-propsconf-is-working-duri.html




Shourya
I've just done my exam and passed (890) - your materials are spot on.
- UNITED STATES
Upvote


90%
I have sat and passed.
- Haidarabad
Upvote


Jessica
Thanks to this site! i passed my 310-055 exam with 90%
- UNITED STATES
Upvote


George
I passed my VCP Exam this week with an 87. I hadn't taken a cert exam in 10 years. Your product was very helpful and helped me hone the areas where I was lacking. Thank you.
- UNITED ARAB EMIRATES
Upvote


David B.
I would like to thank this site for the great support and passing 920-105 exam with excellent result. Thanks once again!
- UNITED STATES
Upvote


Bruce Gord
Thanks Well I just passed the exam with high score. Anyway, thanks for providing the good material.
- Malaysia
Upvote


Parag
Hi, Let me appreciate your Study Guide. I passed the exam with 92%. All the questions were from the study guide. I am still wondering where I went wrong for not scoring 100%. I will not hesitate to recommend your site to my friends and colleagues. Thanks
- UNITED STATES
Upvote


J M
Hello, I purchased your 640-801 last week and I was able to pass my exam with 96%. The questions were all the same. I wondering how you guys do it? Keep up the good job. I appreciate your service and your best price. Thanks
- UNITED STATES
Upvote

Read more ...