Exam SPLK-2001 All QuestionsBrowse all questions from this exam
Question 49

How can event logs be collected from a remote Windows machine using a standard Splunk installation and no customization? (Select all that apply.)

    Correct Answer: A, D

    Splunk can collect event logs from a remote Windows machine using standard methods without customization. One method is by configuring a WMI (Windows Management Instrumentation) input, which allows Splunk to pull data directly from Windows event logs. Another method is by using a Windows universal forwarder, which is a lightweight version of Splunk that can be installed on the remote machine to forward data to the main Splunk instance. Both methods align with standard Splunk functionalities for collecting Windows event logs.

Discussion
IgnotusOptions: AD

A (fetching data, part of the installer) and D (again part of the installer) are correct. the other two are receiving data.

qtygbapjpesdayazkoOptions: AD

A. By configuring a WMI input. D. By using a Windows universal forwarder.

nosavotor

Could someone please verify the accuracy of this answer