ES Deployment

Question 1

How is it possible to specify an alternate location for accelerated storage?

Answer 1

Use the tStatsHomePath setting in indexes.conf

Question 2

Which of the following is a recommended pre-installation step?
- Install the latest Python distribution on the search head.
- Disabled the default search app.
- Download the latest version of KV Store from MongoDB.com
- Configure search head forwarding

Answer 2

Configure search head forwarding

Question 3

Which of the following would allow an add-on to be automatically imported into Splunk Enterprise Security?
- A suffix of .spl
- A prefix of Splunk TA-
- A prefix of TECH_
- A prefix of CIM_

Answer 3

A prefix of Splunk TA-

Question 4

Splunk ES automatically imports apps and add-ons that are prefixed with any of the following:

Answer 4

• DA-ESS
• SA-
• TA-
• Splunk_SA_
• Splunk_TA_
• Splunk_DA-ESS

Question 5

How is it possible to navigate to the ES graphical Navigation Bar editor?

Answer 5

Configure > General > Navigation