Splunk
SPLK-3003 · Question #16
SPLK-3003 Question #16: Real Exam Question with Answer & Explanation
Sign in or unlock SPLK-3003 to reveal the answer and full explanation for question #16. The question stem and answer options stay visible for context.
Question
An index receives approximately 50GB of data per day per indexer at an even and consistent rate. The customer would like to keep this data searchable for a minimum of 30 days. In addition, they have hourly scheduled searches that process a week's worth of data and are quite sensitive to search performance. Given ideal conditions (no restarts, nor drops/bursts in data volume), and following PS best practices, which of the following sets of indexes.conf settings can be leveraged to meet the requirements?
Options
- AfrozenTimePeriodInSecs, maxDataSize, maxVolumeDataSizeMB, maxHotBuckets
- BmaxDataSize, maxTotalDataSizeMB, maxHotBuckets, maxGlobalDataSizeMB
- CmaxDataSize, frozenTimePeriodInSecs, maxVolumeDataSizeMB
- DfrozenTimePeriodInSecs, maxWarmDBCount, homePath.maxDataSizeMB, maxHotSpanSecs
Unlock SPLK-3003 to see the answer
You've previewed enough free SPLK-3003 questions. Unlock SPLK-3003 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.