Assume a file is being monitored and the data was incorrectly indexed to an exclusive index. The index is cleaned and now the data must be reindexed. What other index must be cleaned to reset the inpu

The correct answer is D. _thefishbucket. --reset Reset the fishbucket for the given key or file in the btree. Resetting the checkpoint for an active monitor input reindexes data, resulting in increased license use.

Splunk Indexing

Question

Assume a file is being monitored and the data was incorrectly indexed to an exclusive index. The index is cleaned and now the data must be reindexed. What other index must be cleaned to reset the input checkpoint information for that file?

Options

A_audit
B_checkpoint
C_introspection
D_thefishbucket

How the community answered

(44 responses)

A
5% (2)
C
2% (1)
D
93% (41)

Explanation

--reset Reset the fishbucket for the given key or file in the btree. Resetting the checkpoint for an active monitor input reindexes data, resulting in increased license use.

Topics

#_thefishbucket#Input Checkpoints#File Monitoring#Reindexing

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice