nerdexam
Splunk

SPLK-1003 · Question #187

Which of the following is an alternative method to manually editing the outputs.conf file on the forwarder to send data?

The correct answer is D. Run the command for each indexer.. The command is used to configure a forwarder to splunk add forward-server <IP:port> send data to a specific indexer (or set of indexers). This command updates the outputs.conf file on the forwarder automatically, eliminating the need for manual edits.

Splunk Forwarding

Question

Which of the following is an alternative method to manually editing the outputs.conf file on the forwarder to send data?

Options

  • ARun the command on each indexer.
  • BRun the splunk add forward-indexer IP:port command for each indexer.
  • CRun the splunk add forwarder IP:port command on each indexer.
  • DRun the command for each indexer.

How the community answered

(30 responses)
  • A
    7% (2)
  • C
    3% (1)
  • D
    90% (27)

Explanation

The command is used to configure a forwarder to splunk add forward-server IP:port send data to a specific indexer (or set of indexers). This command updates the outputs.conf file on the forwarder automatically, eliminating the need for manual edits.

Topics

#Splunk Forwarding Configuration#CLI Commands#outputs.conf#Data Forwarding

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice