Online Access Free SPLK-2002 Exam Questions

Splunk configuration parameter settings can differ between multiple .conf files of the same name contained within different apps. Which of the following directories has the highest precedence?

• A.App default directories, in ASCII order.
• B.App local directories, in ASCII order.
• C.System local directory.
• D.System default directory.

(If a license peer cannot communicate to a license manager for 72 hours or more, what will happen?)

• A.What happens depends on license type.
• B.The license peer is placed in violation, and search is blocked.
• C.A license warning is generated, and there is no impact to the license peer.
• D.The license peer is placed in violation, and a warning is generated.

To optimize the distribution of primary buckets; when does primary rebalancing automatically occur? (Select all that apply.)

• A.Rolling restart completes.
• B.Master node rejoins the cluster.
• C.Captain joins or rejoins cluster.
• D.A peer node joins or rejoins the cluster.

(Which of the following is a valid way to determine if a new bundle push will trigger a rolling restart?)

• A.splunk apply cluster-bundle
• B.splunk show cluster-bundle-status
• C.splunk validate cluster-bundle -check-restart
• D.splunk apply cluster-bundle -validate-bundle

How does the average run time of all searches relate to the available CPU cores on the indexers?

• A.Average run time is independent of the number of CPU cores on the indexers.
• B.Average run time decreases as the number of CPU cores on the indexers decreases.
• C.Average run time increases as the number of CPU cores on the indexers decreases.
• D.Average run time increases as the number of CPU cores on the indexers increases.