Splunk Exam SPLK-3003 Topic 3 Question 16 Discussion

Actual exam question for Splunk's SPLK-3003 exam

Question #: 16
Topic #: 3

A customer has a network device that transmits logs directly with UDP or TCP over SSL. Using PS best practices, which ingestion method should be used?

AOpen a TCP port with SSL on a heavy forwarder to parse and transmit the data to the indexing tier.

BOpen a UDP port on a universal forwarder to parse and transmit the data to the indexing tier.

CUse a syslog server to aggregate the data to files and use a heavy forwarder to read and transmit the data to the indexing tier.

DUse a syslog server to aggregate the data to files and use a universal forwarder to read and transmit the data to the indexing tier.

Show Suggested Answer

Suggested Answer: D

by My at May 05, 2022, 11:53 AM

Limited Time Offer

25%

Off

Get Premium SPLK-3003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!