Answer / Dharmendra Kumar Tiwari

Splunk Indexer is a component of the Splunk platform that stores, indexes, and makes data searchable. It's responsible for receiving, processing, and storing event data to make it searchable in Splunk.

Can you write down a general regular expression for extracting ip address from logs?

1 Answers  

---

What are the formats in which search result be exported?

1 Answers  

---

What is the difference between search time and index time field extractions?

1 Answers  

---

What are the defaults fields for every event in splunk?

1 Answers  

---

What are the different options while setting up alerts?

1 Answers  

---

Define monitoring in splunk?

1 Answers  

---

What is the difference between the splunk app framework and splunk sdks?

1 Answers  

---

Define dispatch directory in splunk?

1 Answers  

---

What are the different types of data inputs in splunk?

1 Answers  

---

Explain how data ages in splunk?

1 Answers  

---

What is fishbucket or what is fishbucket index?

1 Answers  

---

What are the pros of getting data into a splunk instance using forwarders?

1 Answers  

---