How does the Monitoring Console monitor forwarders?
How does the Monitoring Console monitor forwarders?
The Monitoring Console monitors forwarders by utilizing internal logs that are forwarded by the forwarders themselves. This method allows the Monitoring Console to gather necessary data from the internal logs, giving it insight into the performance and status of the forwarders.
Best answer is C. MC, which is search head of search heads relies on internal logs forwarded by forwarders.
Agreed C. Quoting the following Splunk URL reference https://docs.splunk.com/Documentation/Splunk/8.2.2/DMC/DMCprerequisites "Monitoring Console setup prerequisites. Forward internal logs (both $SPLUNK_HOME/car/log/splunk and $SPLUNK_HOME/var/log/introspection) to indexers from all other components. Without this step, many dashboards will lack data."
C. With internal logs forwarded by forwarders.
Ans. C. See Forwarder Monitoring with Monitoring Console section of Data Administration PDF
Correct answer is C, based on the Data Admin Power Point from Splunk Training
I'm not really sure but the answer could be C "The Monitoring Console dashboards use data from Splunk Enterprise's internal log files" https://docs.splunk.com/Documentation/Splunk/latest/DMC/DMCoverview
Uses internal logs from forwarders
C......
C. P109 Data admin pdf
The correct answer is C
uses internal logs from forwarders
C is correct