Splunk Exam SPLK-1003 Topic 10 Question 71 Discussion

Actual exam question for Splunk's SPLK-1003 exam

Question #: 71
Topic #: 10

[All SPLK-1003 Questions]

The following stanzas in inputs. conf are currently being used by a deployment client:

[udp: //145.175.118.177:1001

Connection_host = dns

sourcetype = syslog

Which of the following statements is true of data that is received via this input?

AIf Splunk is restarted, data will be queued and then sent when Splunk has restarted.

BLocal firewall ports do not need to be opened on the deployment client since the port is defined in inputs.conf.

CThe host value associated with data received will be the IP address that sent the data.

DIf Splunk is restarted, data may be lost.

Show Suggested Answer

Suggested Answer: C

by Eden at May 24, 2023, 03:15 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

1 days ago

I disagree, I believe the answer is D. Data may be lost if Splunk is restarted.

upvoted 0 times

...

3 days ago

I think the answer is A. Data will be queued and sent after restart.

upvoted 0 times

...