MENU
The data in Splunk is now subject to auditing and compliance controls. A customer would like to ensure that at least one year of logs are retained for both Windows and Firewall events. What data retention controls must be configured?
Suggested Answer: A
Get Premium SPLK-3003 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
ST
Stefanie
11 months ago
I disagree, I think option C is the way to go!
AN
Andra
11 months ago
Wait, are we really sure about the frozenTimePeriod? Sounds tricky.
AL
Aliza
12 months ago
Definitely going with option D! Makes the most sense.
WH
Whitley
12 months ago
I think maxTotalDataSizeMB is also important.
BE
Beckie
12 months ago
Gotta set up frozenTimePeriodInSecs for sure.
AI
Aileen
1 year ago
I believe "Splunk Volume" is key for managing data retention, but I can't remember if it pairs with "frozenTimePeriodInSecs" or something else.
ME
Merilyn
1 year ago
I’m a bit confused about the difference between "maxTotalDataSizeMB" and "Splunk Volume." I hope I can recall the right one during the exam.
TR
Truman
1 year ago
I think we practiced a similar question where we had to configure data retention for compliance. I feel like "frozenTimePeriodInSecs" is definitely involved.
DI
Dick
1 year ago
I remember we discussed the importance of data retention settings in our last study group, but I'm not entirely sure which specific parameters to use.
CH
Charlene
1 year ago
I'm a little confused by all the NetApp-specific terminology. I'll need to review my notes on these tools before answering.
KR
Kris
1 year ago
Hmm, I'm a bit unsure about this one. The wording is a bit tricky. I'll need to re-read it a few times to make sure I understand what they're asking.
SO
Solange
1 year ago
Okay, let me reason this through step-by-step. I think the answer is true, but I want to be certain.