What is the name of the configuration file where you can invoke data transformations by associating them with a host, source, or source type?

1. A. limits.conf
2. B. props.conf
3. C. inputs.conf
4. D. transforms.conf

Correct Answer: B

Which file processor can be used to index files that are locked by another process on Windows systems?

1. A. Monitor
2. B. MonitornoHandle
3. C. Upload
4. D. None of the above

Correct Answer: B

Which feature allows a light forwarder to reduce the amount of data sent to the indexer by discarding some events or fields?

1. A. Data cloning
2. B. Data filtering
3. C. Data sampling
4. D. Data masking

Correct Answer: C

What is the main difference between events indexes and metrics indexes in Splunk Cloud?

1. A. Events indexes impose minimal structure and can accommodate any kind of data, while metrics indexes use a highly structured format to handle metrics data.
2. B. Events indexes use a highly structured format to handle event-based log data, while metrics indexes impose minimal structure and can accommodate any kind of data.
3. C. Events indexes store data in compressed form, while metrics indexes store data in uncompressed form.
4. D. Events indexes store data in uncompressed form, while metrics indexes store data in compressed form.

Correct Answer: A

What is the name of the input processor that allows you to monitor files that Windows rotates automatically on machines that run Windows Vista or Windows Server 2008 and higher?

1. A. monitor
2. B. MonitorNoHandle
3. C. upload
4. D. UploadNoHandle

Correct Answer: B