SPLK-2002 Enterprise Certified Architect Practice Questions
Prepare for SPLK-2002 with more than an answer.
- 1
Which two sections can be expanded using the Search Job Inspector?
Show answer details
Correct answer: B, C
B, C
B, C
- 2
Which of the following is a way to exclude search artifacts when creating a diag?
Show answer details
Correct answer: A
- 3
Which index-time props.conf attributes impact indexing performance? (Select all that apply.)
Show answer details
Correct answer: B, D
- 4
In which phase of the Splunk Enterprise data pipeline are indexed extraction configurations processed?
Show answer details
Correct answer: C
- 5
The guidance Splunk gives for estimating size on for syslog data is 50% of original data size. How does this divide between files in the index?
Show answer details
Correct answer: B
- 6
To improve Splunk performance, parallellngestionPipelines setting can be adjusted on which of the following components in the Splunk architecture? (Select all that apply.)
Show answer details
Correct answer: A, B
A, B -- Reference: https://docs.splunk.eom/Documentation/Splunk/7.3.2/lndexer/Pipelinesets
A, B -- Reference: https://docs.splunk.eom/Documentation/Splunk/7.3.2/lndexer/Pipelinesets
