Splunk Certified Admin |146 questions| with correct answers

which parent directory contains the configuration files in Splunk? CORRECT ANSWER $SPLUNK_HOME/etc where can scripts for scripted inputs reside on the host file system? CORRECT ANSWER $SPLUNK_HOME/bin/scripts $SPLUNK_HOME/etc/system/bin In which Splunk configuration is the SEDCMD used CORRECT ANSWER User Role inheritance allows what to be inherited? CORRECT ANSWER Capabilities Index Access What are the correct order of steps in Duo Multifactor Authentication? CORRECT ANSWER 1. request login 2.Duo MFA 3.Authentication Granted 4. Connect to SAML server 5. Log in to Splunk 6. create user session which Splunk component consolidates the individual results and prepares reports in a distributed environment? CORRECT ANSWER Search Head Within the , which stanzas are valid for data modification? CORRECT ANSWER Sourcetype Source Host