Splunk Splunk Certifications SPLK-1003 Questions & Answers

• Question 181:

  Which Splunk component requires a Forwarder license?

  A. Search head

  B. Heavy forwarder

  C. Heaviest forwarder

  D. Universal forwarder

  Correct Answer: B

• Question 182:

  What action is required to enable forwarder management in Splunk Web?

  A. Navigate to Settings > Server Settings > General Settings, and set an App server port.

  B. Navigate to Settings > Forwarding and receiving, and click on Enable Forwarding.

  C. Create a server class and map it to a client inSPLUNK_HOME/etc/system/local/serverclass.conf.

  D. Place an app in theSPLUNK_HOME/etc/deployment-appsdirectory of the deployment server.

  Correct Answer: C

  Reference:https://docs.splunk.com/Documentation/Splunk/8.2.1/Updating/Forwardermanag ementoverview

  https://docs.splunk.com/Documentation/MSApp/2.0.3/MSInfra/Setupadeploymentserver

  "To activate deployment server, you must place at least one app into %SPLUNK_HOME%\etc\deployment-apps on the host you want to act as deployment server. In this case, the app is the "send to indexer" app you created earlier, and the host is the indexer you set up initially.