Splunk Cloud Certified Admin SPLK-1005 Question # 7 Topic 1 Discussion

Splunk Cloud Certified Admin SPLK-1005 Question # 7 Topic 1 Discussion

SPLK-1005 Exam Topic 1 Question 7 Discussion:
Question #: 7
Topic #: 1

Due to internal security policies, a Splunk Cloud administrator cannot send data directly to Splunk Cloud from certain data sources. Additional parsing and API-based data sources also need to be sent to Splunk Cloud. What forwarder type should the Splunk Cloud administrator use to satisfy these requirements within their environment?


A.

Syslog-ng server with a universal forwarder


B.

Light forwarder as an intermediate forwarder


C.

Heavy forwarder as an intermediate forwarder


D.

Universal forwarder as an intermediate forwarder


Get Premium SPLK-1005 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.