Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Splunk Enterprise 6.5 System Administration > Brainscape_Flash_Cards_CSV > Flashcards

Brainscape_Flash_Cards_CSV Flashcards

1
Q

What is the default port for splunkd?

A

8089

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is the default port for Splunk Web?

A

8000

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the default port for Web app-server proxy?

A

8065

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the default port for KV Store?

A

8191

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What three ulimit resources need to be increased on Splunk indexers?

A
  1. core file size 2. number of open files 3. max user processes
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the cli command to set Splunk to run when a server is rebooted?

A

./splunk enable boot-start -user splunk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is SPLUNK_HOME usually located (in the file system)?

A

/opt/splunk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the three main directories under SPLUNK_HOME?

A
  1. bin 2. etc 3. var
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What folder to the Splunk executables normally go into?

A

/opt/splunk/bin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What folder contains all the Splunk licenses, configs, apps, etc?

A

/opt/splunk/etc/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What folder contains the Splunk indexes by default?

A

/opt/splunk/var/lib/splunk

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is the cli command to see what port splunkd is listening on?

A

./splunk show splunkd-port

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the cli command to see what port Splunk Web is listening on?

A

./splunk show web-port

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the cli command to start, stop, and restart Splunk?

A

./splunk [start | stop | restart ]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the cli command to see the status of Splunk on a server?

A

./splunk status

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

How long is a trial license valid for?

A

60 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

How much data can you ingest with a trial license?

A

500 mb per day

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How much data can you ingest with the free license?

A

500 mb per day

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

When does the ‘daily license quota’ reset?

A

At midnight of each day

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is the definition of a license ‘warning’ in Splunk?

A

If the amount of data ingested in a day exceeds the allocated daily quote in a pool

21
Q

When do you get a ‘violation’ when using an Enterprise license?

A

Five or more warnings in a rolling 30-day period.

22
Q

When do you get a ‘violation’ when using a free license?

A

Three or more warnings in a rolling 30-day period.

23
Q

What data is used to calculate how much data you ingested in a day?

A

All data that flows through the parsing pipeline

24
Q

What is the cli command to add a license to Splunk?

A

./splunk add license [path to license file]

25
Q

What folder does the Splunk licenses get saved to when you install a license?

A

/opt/splunk/etc/licenses/[type_of_license]

26
Q

Which URI do you use when you want to ‘point’ a Splunk server at a Master license server?

A

https://[ip_address_of_server]:8089/

27
Q

What do ‘pools’ do?

A

They allow licenses to be subdivided and assigned to a group of indexers

28
Q

Why would you use ‘pools’?

A

A mulit-tenant Splunk environment is the most common reason.

29
Q

Which folder are apps installed to?

A

/opt/splunk/etc/apps

30
Q

What is an ‘add-on’?

A

It is a subset of an app that usually contains data collection but no GUI (reports or dashboards)

31
Q

What is the command to install a Splunk app from the CLI?

A

./splunk install app [path-to-appfile]

32
Q

What is another way to install an app using tar? (What is the actual command)?

A
  1. cd SPLUNK_HOME/etc/apps 2. tar -xf [path-to-appfile]
33
Q

What does the ‘-c’ option for the tar command do?

A

Creates a new archive

34
Q

What does the ‘-x’ option for the tar command do?

A

Extract files from an archive

35
Q

What does the ‘-C’ option for the tar command do?

A

Change to directory specified after this option

36
Q

What does the ‘-v’ option for the tar command do?

A

Verbosely list files processed

37
Q

What does the ‘-f’ option for the tar command do?

A

use archive file or device specified after this option

38
Q

What does the ‘-z’ option for the tar command do?

A

Filter the archive through gzip

39
Q

What is the command to delete a Splunk app from the CLI?

A

./splunk remove app [app_folder]

40
Q

What can a user do to an app if they have ‘read’ permissions to it?

A

They can see the app and use it

41
Q

What can a user do to an app if they have ‘write’ permissions to it?

A

They can add/delete/modify knowledge objects used in the app

42
Q

By default, what permissions do users have within the ‘search’ app?

A

Read permissions only

43
Q

What local file (and path) will show you how to use all the .conf files?

A

SPLUNK_HOME/etc/system/README

44
Q

Where does Splunk put the configuration files that is ‘ships with’?

A

In the ‘default’ directories

45
Q

How do you edit a configuration file in a ‘default’ directory?

A

You DON’T! You copy the file to the ‘local’ directory and only had the changes that you want to that file. That files contents should be very small.

46
Q

What are the three ‘layers’ of configuration files that impact configuration file precedence?

A

user, app, and system

47
Q

What are the two schemes or ‘contexes’ that Splunk users to determine configuration file precedence?

A

app/user context or global context

48
Q

What is the configuration file precedence in global context (from highest to lowest precedence) for non-cluster peer nodes?

A
  1. system local directory 2. app local directories 3. app default directories 4. system default directory

Splunk Enterprise 6.5 System Administration (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions