nerdexam
Splunk

SPLK-1003 · Question #83

An organization wants to collect Windows performance data from a set of clients, however, installing Splunk software on these clients is not allowed. What option is available to collect this data in…

The correct answer is B. Use Windows Remote Inputs with WMI. https://docs.splunk.com/Documentation/Splunk/8.1.0/Data/Considerationsfordecidinghowtomonito "The Splunk platform collects remote Windows data for indexing in one of two ways: From Splunk forwarders, Using Windows Management Instrumentation (WMI). For Splunk Cloud deployments…

Splunk Forwarding

Question

An organization wants to collect Windows performance data from a set of clients, however, installing Splunk software on these clients is not allowed. What option is available to collect this data in Splunk Enterprise?

Options

  • AUse Local Windows host monitoring.
  • BUse Windows Remote Inputs with WMI.
  • CUse Local Windows network monitoring.
  • DUse an index with an Index Data Type of Metrics.

How the community answered

(35 responses)
  • A
    6% (2)
  • B
    91% (32)
  • C
    3% (1)

Explanation

https://docs.splunk.com/Documentation/Splunk/8.1.0/Data/Considerationsfordecidinghowtomonito "The Splunk platform collects remote Windows data for indexing in one of two ways: From Splunk forwarders, Using Windows Management Instrumentation (WMI). For Splunk Cloud deployments, you must use the Splunk Universal Forwarder on a Windows machines to montior remote

Topics

#Windows data collection#WMI#Remote inputs#Agentless monitoring

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice