Splunk SPLK-3003 - Splunk Core Certified Consultant Exam
Page: 3 / 27
Total 133 questions
Question #11 (Topic: Single Topic)
A customer's deployment server is overwhelmed with forwarder connections after adding an additional 1000 clients. The default phone home interval is set to 60
seconds. To reduce the number of connection failures to the DS what is recommended?
seconds. To reduce the number of connection failures to the DS what is recommended?
A. Create a tiered deployment server topology.
B. Reduce the phone home interval to 6 seconds.
C. Leave the phone home interval at 60 seconds.
D. Increase the phone home interval to 600 seconds.
Answer: D
Question #12 (Topic: Single Topic)
Which of the following server.conf stanzas indicates the Indexer Discovery feature has not been fully configured (restart pending) on the Master Node?
A.
B.
C.
D.
A.
B.
C.
D.
Answer: C
Question #13 (Topic: Single Topic)
What is the Splunk PS recommendation when using the deployment server and building deployment apps?
A. Carefully design smaller apps with specific configuration that can be reused.
B. Only deploy Splunk PS base configurations via the deployment server.
C. Use $SPLUNK_HOME/etc/system/local configurations on forwarders and only deploy TAs via the deployment server.
D. Carefully design bigger apps containing multiple configs.
Answer: A
Question #14 (Topic: Single Topic)
Which of the following processor occur in the indexing pipeline?
A. tcp out, syslog out
B. Regex replacement, annotator
C. Aggregator
D. UTF-8, linebreaker, header
Answer: A
Question #15 (Topic: Single Topic)
Which configuration item should be set to false to significantly improve data ingestion performance?
A. AUTO_KV_JSON
B. BREAK_ONLY_BEFORE_DATE
C. SHOULD_LINEMERGE
D. ANNOTATE_PUNCT
Answer: C
