Free Splunk SPLK-2002 Exam Dumps Questions & Answers

(Based on the data sizing and retention parameters listed below, which of the following will correctly calculate the index storage required?)
* Daily rate = 20 GB / day
* Compress factor = 0.5
* Retention period = 30 days
* Padding = 100 GB

• A.  20 * 30 + 100 = 700 GB
• B.  20 / 0.5 * 30 + 100 = 1300 GB
• C.  20 * 0.5 * 30 + 100 = 400 GB
• D.  (20 * 30 + 100) * 0.5 = 350 GB

Which two sections can be expanded using the Search Job Inspector?

• A.  Optimization suggestions.
• B.  Execution costs.
• C.  Saved search history.
• D.  Search job properties.

To activate replication for an index in an indexer cluster, what attribute must be configured in indexes.conf on all peer nodes?

• A.  replicate = 0
• B.  repFactor = 0
• C.  repFactor = auto
• D.  replicate = auto

In search head clustering, which of the following methods can you use to transfer captaincy to a different member? (Select all that apply.)

• A.  Run the splunk transfer shcluster-captain command from the member you would like to become the captain.
• B.  Run the splunk transfer shcluster-captain command from the current captain.
• C.  Use the Monitoring Console.
• D.  Use the Search Head Clustering settings menu from Splunk Web on any member.

Where in the Job Inspector can details be found to help determine where performance is affected?

• A.  Search Job Properties > runtime
• B.  Search Job Properties > runDuration
• C.  Job Details Dashboard > Total Events Matched
• D.  Execution Costs > Components