Which of the following artifacts are included in a Splunk diag file? (Select all that apply.)

Question

Options

• AOS settings.
• BInternal logs.
• CCustomer data.
• DConfiguration files.

Explanation

A Splunk diag file is a diagnostic package generated to help Splunk Support troubleshoot issues - it collects OS settings (A), internal logs (B), and configuration files (D). These three artifacts give Support visibility into the environment, Splunk's own operational behavior, and how the instance is configured. Customer data (C) is intentionally excluded from diag files; Splunk designed the tool this way specifically to prevent sensitive indexed data from being shared outside an organization, so you never need to worry about a diag accidentally leaking customer events. A helpful memory tip: think of diag as collecting everything about Splunk itself and the machine it runs on, but nothing about what customers put into Splunk - if it's data you ingested, it stays out.

No community discussion yet for this question.