B and D both: compressed=true This tells the forwarder to compress the data before it forwards the data to receiving indexers in the target groups. If you set compressed to "false", the forwarder sends raw data.
Splunk doc: https://docs.splunk.com/Documentation/Forwarder/8.1.1/Forwarder/Configureforwardingwithoutputs.conf#:~:text=compressed%3Dtrue%20This%20tells%20the,the%20forwarder%20sends%20raw%20data.
The capabilities of a universal forwarder when sending data include:
B. Compressing data
D. Indexer acknowledgement
Explanation:
- **Compressing data**: Universal forwarders can compress data before sending it to reduce bandwidth usage.
- **Indexer acknowledgement**: They can confirm receipt of data by the indexer to ensure data integrity and completeness in the indexing process. < https://bitly.cx/NyKD > I passed my SPLK exam with ease thanks to you. The dumps were accurate and the explanations were clear.
I think C is also correct.
https://docs.splunk.com/Documentation/Splunk/latest/Data/Anonymizedata
"To anonymize data with Splunk Enterprise, you must configure a Splunk Enterprise instance as a heavy forwarder and anonymize the incoming data with that instance before sending it to Splunk Enterprise."
UF has the following capabilities:
- Index ack* (useACK=true in outputs.conf)
- Send data over HTTP
- Compressing the feed (compressed = true on both input.conf (indexer) and outputs.conf (uf))
- Securing the feed with SSL
So, D and B
C. that would be a HF
A. not sure if Forwarders in general can send alerts
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Ashton_98
Highly Voted 3 years, 11 months agoPrincee
Highly Voted 3 years, 8 months agogatundu_
Most Recent 3 weeks, 4 days agonewrose
2 months, 1 week agoleteke9429
3 months, 2 weeks agodohatelo
6 months, 1 week agobobixaka
11 months, 2 weeks agoIbisc
1 year, 3 months agoMntman77
1 year, 3 months agoharrytbb
1 year, 8 months agoemlch
2 years, 1 month agoemlch
2 years, 1 month agoAilen_Man
2 years, 5 months agoMarco63
2 years, 5 months agoRedYeti
2 years, 6 months agoApis
2 years, 9 months agoBMO
3 years, 4 months agoZeusP
3 years, 4 months ago