Exam SPLK-1005 Topic 10 Question 34 Discussion

Actual exam question for Splunk's SPLK-1005 exam
Question #: 34
Topic #: 10
Which of the following is a correct statement about Universal Forwarders?

Suggested Answer: C Vote an answer

A Universal Forwarder (UF) can indeed be configured as an Intermediate Forwarder. This means that the UF can receive data from other forwarders and then forward that data on to indexers or Splunk Cloud, effectively acting as a relay point in the data forwarding chain.
* Option Ais incorrect because a Universal Forwarder does not need to contact the license master; only indexers and search heads require this.
* Option Bis incorrect as Universal Forwarders can connect directly to Splunk Cloud or via other forwarders.
* Option Dis also incorrect because the default output bandwidth limit for a UF is typically much higher than 500KBps (default is 256KBps per pipeline, but can be configured).
Splunk Documentation Reference: Universal Forwarder

by Vivian at Jan 30, 2025, 11:26 AM

Limited Time Offer

15%

Off

Get Premium SPLK-1005 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10