An add-on has configured field aliases for source IP address and destination IP address fields. A specific user prefers not to have those fields present in their user context. Based on the default props.conf below, which SPLUNK_HOME/etc/users/buttercup/myTA/local/props.conf stanza can be added to the user’s local context to disable the field aliases?
What options are available when creating custom roles? (select all that apply)
When Splunk is integrated with LDAP, which attribute can be changed in the Splunk UI for an LDAP user?
Which of the following types of data count against the license daily quota?
What type of data is counted against the Enterprise license at a fixed 150 bytes per event?
On the deployment server, administrators can map clients to server classes using client filters. Which of the
following statements is accurate?
This file has been manually created on a universal forwarder
A new Splunk admin comes in and connects the universal forwarders to a deployment server and deploys the same app with a new
Which file is now monitored?
The CLI command splunk add forward-server indexer:
which configuration file?