An organization wants to collect Windows performance data from a set of clients, however, installing Splunk software on these clients is not allowed. What option is available to collect this data in Splunk Enterprise?
An organization wants to collect Windows performance data from a set of clients, however, installing Splunk software on these clients is not allowed. What option is available to collect this data in Splunk Enterprise?
To collect Windows performance data from a set of clients without installing Splunk software on them, one should use Windows Remote Inputs with Windows Management Instrumentation (WMI). WMI allows for the remote collection of performance data, which is crucial when direct installation of Splunk software is not allowed on client machines.
The Ans is B https://docs.splunk.com/Documentation/Splunk/8.1.0/Data/ConsiderationsfordecidinghowtomonitorWindowsdata
Agreed B. Quoting the Splunk reference URL https://docs.splunk.com/Documentation/Splunk/8.1.0/Data/ConsiderationsfordecidinghowtomonitorWindowsdata "The Splunk platform collects remote Windows data for indexing in one of two ways: From Splunk forwarders, Using Windows Management Instrumentation (WMI). For Splunk Cloud deployments, you must use the Splunk Universal Forwarder on a Windows machines to montior remote Windows data."
Answer is B.
pg 190 data admin pdf
Answer is B, per Data Admin pdf page 190
Answer is B as per the following document. https://docs.splunk.com/Documentation/Splunk/8.0.5/Data/ConsiderationsfordecidinghowtomonitorWindowsdata