SPLK-2001 Exam Question 11
A fellow Splunk administrator is reviewing an app that has been downloaded from splunkbase and deployed in an organization. The admin has e-mailed the following configuration snippet with a brief note that says "fix the permissions".
In what configuration file should the snippet be placed?
[]
access = read : [ * ], write : [ admin ] export - system
(Assume that $APP_HOME refers to the path that the app is installed, e.g. $SPLUNK_HOME/etc/apps/<app name>)
In what configuration file should the snippet be placed?
[]
access = read : [ * ], write : [ admin ] export - system
(Assume that $APP_HOME refers to the path that the app is installed, e.g. $SPLUNK_HOME/etc/apps/<app name>)
SPLK-2001 Exam Question 12
How can event logs be collected from a remote Windows machine using a standard Splunk installation and no customization? (Select all that apply.)
SPLK-2001 Exam Question 13
When the search/jobs REST endpoint is called to execute a search, what can be done to reduce the results size in the results? (Select all that apply.)
SPLK-2001 Exam Question 14
Which of the following is a security best practice?
SPLK-2001 Exam Question 15
What application security best practices should be adhered to while developing an app for Splunk? (Select all that apply.)