Splunk SPLK-3003 Exam - Topic 3 Question 16 Discussion
A customer has a network device that transmits logs directly with UDP or TCP over SSL. Using PS best practices, which ingestion method should be used?
D) Use a syslog server to aggregate the data to files and use a universal forwarder to read and transmit the data to the indexing tier.
A) Open a TCP port with SSL on a heavy forwarder to parse and transmit the data to the indexing tier.
B) Open a UDP port on a universal forwarder to parse and transmit the data to the indexing tier.
C) Use a syslog server to aggregate the data to files and use a heavy forwarder to read and transmit the data to the indexing tier.
Lili
8 months agoSharmaine
8 months agoElly
9 months agoBuffy
9 months agoKate
9 months agoMicaela
9 months agoDorethea
9 months agoBrandon
9 months agoBrandon
9 months agoLevi
9 months agoGail
9 months agoKing
10 months ago