Splunk
SPLK-2002(205Q) · Question #131
Users are asking the Splunk administrator to thaw recently-frozen buckets very frequently. What could the Splunk administrator do to reduce the need to thaw buckets?
Sign in or unlock SPLK-2002(205Q) to reveal the answer and full explanation for question #131. The question stem and answer options stay visible for context.
Index Management
Question
Users are asking the Splunk administrator to thaw recently-frozen buckets very frequently. What could the Splunk administrator do to reduce the need to thaw buckets?
Options
- AChange f rozenTimePeriodlnSecs to a larger value.
- BChange maxTotalDataSizeMB to a smaller value.
- CChange maxHotSpanSecs to a larger value.
- DChange coldToFrozenDir to a different location.
Unlock SPLK-2002(205Q) to see the answer
You've previewed enough free SPLK-2002(205Q) questions. Unlock SPLK-2002(205Q) for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#bucket lifecycle#frozenTimePeriodInSecs#data retention#indexes.conf