When ES content is exported, an app with a .spl extension is automatically created. What is the best practice when exporting and importing updates to ES content?
A.
Use new app names each time content is exported.
B.
Do not use the .spl extension when naming an export.
C.
Always include existing and new content for each export.
D.
Either use new app names or always include both existing and new content.
Correct Answer: D
Either use new app names each time (which could be difficult to manage) or make sure you always include all content (old and new) each time you export.
Ref: Administering Splunk Enterprise Security, Page 286.
Either use new app names each time (which could be difficult to manage) or make sure you always include all content (old and new) each time you export
ref : admin ES 6.6 page 238
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
TASOOMRO
Highly Voted 2 years, 6 months agogorasz
Most Recent 7 months, 3 weeks agokodji
1 year, 1 month agoandy73
1 year, 6 months agoandy73
1 year, 6 months ago