Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Splunk SPLK-1005 Exam - Topic 7 Question 33 Discussion

When using Splunk Universal Forwarders, which of the following is true?
B) Any number of Universal Forwarders may connect directly to Splunk Cloud.
A) No more than six Universal Forwarders may connect directly to Splunk Cloud.
C) Universal Forwarders must send data to an Intermediate Forwarder.
D) There must be one Intermediate Forwarder for every three Universal Forwarders.

Splunk SPLK-1005 Exam - Topic 7 Question 33 Discussion

Actual exam question for Splunk's SPLK-1005 exam
Question #: 33
Topic #: 7
[All SPLK-1005 Questions]

When using Splunk Universal Forwarders, which of the following is true?

Show Suggested Answer Hide Answer
Suggested Answer: B

Universal Forwarders can connect directly to Splunk Cloud, and there is no limit on the number of Universal Forwarders that may connect directly to it. This capability allows organizations to scale their data ingestion easily by deploying as many Universal Forwarders as needed without the requirement for intermediate forwarders unless additional data processing, filtering, or load balancing is required.

Splunk Documentation Reference: Forwarding Data to Splunk Cloud


Contribute your Thoughts:

0/2000 characters
Janella
2 hours ago
I vaguely recall something about limits on connections, but I can't remember if it was six or if they could all connect directly.
upvoted 0 times
...
Shawnta
5 days ago
I practiced a similar question, and I think it was mentioned that Universal Forwarders can connect directly, which makes me lean towards B as well.
upvoted 0 times
...
Tambra
10 days ago
I’m not entirely sure, but I feel like there was something about needing an Intermediate Forwarder for data to be sent properly.
upvoted 0 times
...
Genevieve
16 days ago
I think I remember that there’s no limit on how many Universal Forwarders can connect to Splunk Cloud, so maybe B?
upvoted 0 times
...

Save Cancel