SPLK-1005 無料問題集「Splunk Cloud Certified Admin」

（A）Deployment Server

（B）Splunk's CLI

（C）props. conf can be edited directly from the GUI

（D）Data Preview

（A）Create a role named Power in Splunk, then map Mia's account to that role.

（B）Use the Cloud Monitoring Console app as an administrator to map Mia's account to the power role.

（C）Have Mia log into Splunk, then update her own role in user settings.

（D）Ask the LDAP administrator to move Mia's account to an appropriately mapped LDAP group.

（A）

（B）

（C）

（D）

（A）Monitor inputs can ignore a file's existing content, indexing new data as it arrives, by configuring the tailProcessor option.

（B）Monitor inputs are configured in the monitor, conf file.

（C）The crSalt setting is required.

（D）The ignoreOlderThan option allows files to be ignored based on the file modification time.

（A）A monitor stanza, sourcetype, index, and host is required to ingest data.

（B）A monitor stanza, sourcetype, and Index is required to ingest data.

（C）Only the monitor stanza is required to ingest data.

（D）A monitor stanza and sourcetype is required to ingest data.

（A）IPv4. CIDRs, DNS names. Wildcards

（B）CIDRs, DNS names, Wildcards

（C）IPv4, IPv6, CIDRs, DNS names

（D）IPv4, IPv6, CIDRs, DNS names, Wildcards

（A）Merging pipeline

（B）Parsing pipeline

（C）Index pipeline

（D）Typing pipeline

（A）props.conf and transforms.conf

（B）parsing.conf and transforms.conf

（C）transforms.conf and fields.conf

（D）transforms.conf and sourcetypes.conf