MENU
Parsing of data can happen both in HF and Indexer.
Suggested Answer: C
Get Premium SPLK-1001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
FR
Fredric
11 months ago
Nope, only HF does the parsing.
SU
Susana
11 months ago
Totally agree, it's both!
EV
Evan
12 months ago
Wait, are you sure about that?
CL
Clarinda
12 months ago
I thought it was only HF!
GA
Gaynell
12 months ago
Parsing can definitely happen in both HF and Indexer.
JE
Jesse
1 year ago
I feel like the answer is "No," but I can't recall the details from the study materials.
LA
Latonia
1 year ago
I’m a bit confused about this one. I thought HF was more about data storage than parsing.
GO
Goldie
1 year ago
I remember a practice question that mentioned data parsing in both contexts, so I’m leaning towards "Yes."
GR
Gregg
1 year ago
I think parsing can happen in both HF and Indexer, but I'm not entirely sure.
CA
Carma
1 year ago
Hmm, I'm not sure about the Splunk apps part, I'll have to think that one through.
BE
Beckie
1 year ago
Hmm, I'm a bit unsure about this one. I know closing an Incident is important, but I'm not totally clear on the best approach. I'll have to think it through carefully.
AR
Ariel
1 year ago
I think I recall something about denial rules taking precedence when priorities are the same, so maybe A is correct?