SPLK-3003 Practice Test

SPLK-3003 Practice Test practice questions, page 3 of 6, with answer review and explanations.

Question 11

A customer's deployment server is overwhelmed with forwarder connections after adding an additional 1000 clients. The default phone home interval is set to 60 seconds. To reduce the number of connection failures to the DS what is recommended?

  1. Create a tiered deployment server topology.
  2. Reduce the phone home interval to 6 seconds.
  3. Leave the phone home interval at 60 seconds.
  4. Increase the phone home interval to 600 seconds.

Question 12

Which of the following server.conf stanzas indicates the Indexer Discovery feature has not been fully configured (restart pending) on the Master Node? A. B. C. D.

Question 13

What is the Splunk PS recommendation when using the deployment server and building deployment apps?

  1. Carefully design smaller apps with specific configuration that can be reused.
  2. Only deploy Splunk PS base configurations via the deployment server.
  3. Use $SPLUNK_HOME/etc/system/local configurations on forwarders and only deploy TAs via the deployment server.
  4. Carefully design bigger apps containing multiple configs.

Question 14

Which of the following processor occur in the indexing pipeline?

  1. tcp out, syslog out
  2. Regex replacement, annotator
  3. Aggregator
  4. UTF-8, linebreaker, header

Question 15

Which configuration item should be set to false to significantly improve data ingestion performance?

  1. AUTO_KV_JSON
  2. BREAK_ONLY_BEFORE_DATE
  3. SHOULD_LINEMERGE
  4. ANNOTATE_PUNCT