Define a Splunk Index CLOUD-CERTIFIED-ADMIN Practice Questions (Page 4)

Questions 16–17

1. 16foundation · easy

   Which of the following is a required consideration when creating a new index in Splunk?

   • AConfiguring a lookup table for the index
   • BAssigning a default source type to the index
   • CSelecting a data model for the index
   • DChoosing a unique index name that follows Splunk naming rules
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A team wants to store application performance metrics like CPU usage and response times for 30 days, and also store detailed application logs for 180 days. What is the recommended approach?

   • AUse a metrics index for the metrics with a 30-day retention, and a separate event index for the logs with a 180-day retention.
   • BUse a single metrics index for both metrics and logs, with a 30-day retention.
   • CUse a single event index for both metrics and logs, with a 180-day retention.
   • DUse a summary index for the metrics and an event index for the logs.
   Reveal Solution Discussion Select an answer first