nerdexam
Splunk

SPLK-1003 · Question #55

After configuring a universal forwarder to communicate with an indexer, which index can be checked via the Splunk Web UI for a successful connection?

The correct answer is D. index=_internal. https://docs.splunk.com/Documentation/Splunk/8.0.5/Security/Validateyourconfiguration

Basic Troubleshooting

Question

After configuring a universal forwarder to communicate with an indexer, which index can be checked via the Splunk Web UI for a successful connection?

Options

  • Aindex=main
  • Bindex=test
  • Cindex=summary
  • Dindex=_internal

How the community answered

(50 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    4% (2)
  • D
    92% (46)

Explanation

https://docs.splunk.com/Documentation/Splunk/8.0.5/Security/Validateyourconfiguration

Topics

#Universal Forwarder#Troubleshooting#_internal index#Forwarder Monitoring

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice