Which optional configuration setting in inputs .conf allows you to selectively forward the data to specific indexer(s)?

The correct answer is A. _TCP_ROUTING. https://docs.splunk.com/Documentation/Splunk/7.0.3/Forwarding/Routeandfilterdatad#Perform_s elective_indexing_and_forwarding Specifies a comma-separated list of tcpout group names. Use this setting to selectively forward your data to specific indexers by specifying the tcpout…

Splunk Forwarding

Question

Options

A_TCP_ROUTING
B_INDEXER_LIST
C_INDEXER_GROUP
D_INDEXER ROUTING

How the community answered

(29 responses)

A
90% (26)
C
7% (2)
D
3% (1)

Explanation

https://docs.splunk.com/Documentation/Splunk/7.0.3/Forwarding/Routeandfilterdatad#Perform_s elective_indexing_and_forwarding Specifies a comma-separated list of tcpout group names. Use this setting to selectively forward your data to specific indexers by specifying the tcpout groups that the forwarder should use when forwarding the data. Define the tcpout group names in the outputs.conf file in [tcpout:<tcpout_group_name>] stanzas. The groups present in defaultGroup in [tcpout] stanza in the outputs.conf file.

Topics

#inputs.conf#data routing#selective forwarding#_TCP_ROUTING

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice