SPLK-2002試験無料問題集（160題）「Splunk Enterprise Certified Architect 認定」

出題：1

When troubleshooting a situation where some files within a directory are not being indexed, the ignored files are discovered to have long headers. What is the first thing that should be added to inputs.conf?

A. Decrease the value of initCrcLength.

B. Increase the value of initCrcLength.

C. Add a crcSalt=<SOURCE> attribute.

D. Add a crcSalt=<string> attribute.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

A search head cluster member contains the following in its server .conf. What is the Splunk server name of this member?

A. shc4

B. node1

C. node3

D. idxc2

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

To reduce the captain's work load in a search head cluster, what setting will prevent scheduled searches from running on the captain?

A. captain_is_adhoc_searchhead = true (on all members)

B. adhoc_searchhead = true (on the current captain)

C. captain_is_adhoc_searchhead = true (on the current captain)

D. adhoc_searchhead = true (on all members)

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Which of the following would be the least helpful in troubleshooting contents of Splunk configuration files?

A. btool output

B. search.log

C. crash logs

D. diagnostic logs

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which index-time props.conf attributes impact indexing performance? (Select all that apply.)

A. ANNOTATE_PUNCT

B. SHOULD_LINEMERGE

C. LINE_BREAKER

D. REPORT

正解：B,C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Configurations from the deployer are merged into which location on the search head cluster member?

A. SPLUNK_HOME/etc/apps/search/default

B. SPLUNK_HOME/etc/system/local

C. SPLUNK_HOME/etc/apps/APP_HOME/local

D. SPLUNK_HOME/etc/apps/APP_HOME/default

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Which Splunk log file would be the least helpful in troubleshooting a crash?

A. splunk_instrumentation.log

B. splunkd_stderr.log

C. splunkd.log

D. crash-2022-05-13-ll:42:57.1og

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

How does IT Service Intelligence (ITSI) impact the planning of a Splunk deployment?

A. ITSI requires a dedicated deployment server.

B. Depending on the Key Performance Indicators that are being tracked, additional infrastructure may be needed.

C. The amount of users using ITSI will not impact performance.

D. ITSI in a Splunk deployment does not require additional hardware resources.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

When using the props.conf LINE_BREAKER attribute to delimit multi-line events, the SHOULD_LINEMERGE attribute should be set to what?

A. None

B. True

C. Auto

D. False

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

Indexing is slow and real-time search results are delayed in a Splunk environment with two indexers and one search head. There is ample CPU and memory available on the indexers. Which of the following is most likely to improve indexing performance?

A. Decrease the maximum concurrent scheduled searches in limits.conf

B. Increase the number of parallel ingestion pipelines in server.conf

C. Decrease the maximum size of the search pipelines in limits.conf

D. Increase the maximum number of hot buckets in indexes.conf

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

SPLK-2002試験無料問題集「Splunk Enterprise Certified Architect 認定」