The following stanzas in inputs.

Splunk SPLK-1003 Question Answer

The following stanzas in inputs. conf are currently being used by a deployment client:

[udp: //145.175.118.177:1001

Connection_host = dns

sourcetype = syslog

Which of the following statements is true of data that is received via this input?

If Splunk is restarted, data will be queued and then sent when Splunk has restarted.

Local firewall ports do not need to be opened on the deployment client since the port is defined in inputs.conf.

The host value associated with data received will be the IP address that sent the data.

If Splunk is restarted, data may be lost.

Splunk SPLK-1003 Summary

Price: $52.5 ~~$149.99~~