A customer has a number of inefficient regex replacement transforms being applied. When under heavy load the indexers are struggling to maintain the expected indexing rate. In a worst case scenario, w

The correct answer is C. Typing. https://wiki.splunk.com/Community:HowIndexingWorks

Troubleshooting and Health Checks

Question

A customer has a number of inefficient regex replacement transforms being applied. When under heavy load the indexers are struggling to maintain the expected indexing rate. In a worst case scenario, which queue(s) would be expected to fill up?

Options

ATyping, merging, parsing, input
BParsing
CTyping
DIndexing, typing, merging, parsing, input

How the community answered

(26 responses)

A
4% (1)
B
15% (4)
C
54% (14)
D
27% (7)

Explanation

https://wiki.splunk.com/Community:HowIndexingWorks

Topics

#indexing pipeline#queue backpressure#regex transforms#typing queue

Community Discussion

No community discussion yet for this question.

Full SPLK-3003 Practice