SPLK-2001 Exam QuestionsBrowse all questions from this exam

SPLK-2001 Exam - Question 49


How can event logs be collected from a remote Windows machine using a standard Splunk installation and no customization? (Select all that apply.)

Show Answer
Correct Answer: AD

Splunk can collect event logs from a remote Windows machine using standard methods without customization. One method is by configuring a WMI (Windows Management Instrumentation) input, which allows Splunk to pull data directly from Windows event logs. Another method is by using a Windows universal forwarder, which is a lightweight version of Splunk that can be installed on the remote machine to forward data to the main Splunk instance. Both methods align with standard Splunk functionalities for collecting Windows event logs.

Discussion

3 comments
Sign in to comment
IgnotusOptions: AD
Aug 23, 2023

A (fetching data, part of the installer) and D (again part of the installer) are correct. the other two are receiving data.

nosavotor
Aug 22, 2023

Could someone please verify the accuracy of this answer

qtygbapjpesdayazkoOptions: AD
Sep 17, 2023

A. By configuring a WMI input. D. By using a Windows universal forwarder.