The Deployment Server is overwhelmed by forwarders checking in too frequently. To address this problem, the admin wants to have forwarders check in on an hourly basis. How would the admin accomplish…

The correct answer is A. Deploy deploymentclient.conf to the forwarders containing phoneHomeIntervalInSecs. The setting is configured in the file phoneHomeIntervalInSecs deploymentclient.conf on the forwarders. By setting phoneHomeIntervalInSecs to 3600 seconds (1 hour), the forwarders will check in with the Deployment Server once every hour instead of more frequently. This helps to…

Splunk Forwarding

Question

The Deployment Server is overwhelmed by forwarders checking in too frequently. To address this problem, the admin wants to have forwarders check in on an hourly basis. How would the admin accomplish this?

Options

ADeploy deploymentclient.conf to the forwarders containing phoneHomeIntervalInSecs
BDeploy deploymentclient.conf to the Deployment Server containing
CDeploy to the Deployment Server containing
DDeploy serverclass.conf to the forwarders containing phoneHomeIntervalInSecs =

How the community answered

(48 responses)

A
94% (45)
C
4% (2)
D
2% (1)

Explanation

The setting is configured in the file phoneHomeIntervalInSecs deploymentclient.conf on the forwarders. By setting phoneHomeIntervalInSecs to 3600 seconds (1 hour), the forwarders will check in with the Deployment Server once every hour instead of more frequently. This helps to reduce the load on the Deployment Server.

Topics

#Forwarder management#Deployment Server#Configuration files#Client configuration

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice