Exam SPLK-1003 All QuestionsBrowse all questions from this exam
Question 63

After configuring a universal forwarder to communicate with an indexer, which index can be checked via the Splunk Web UI for a successful connection?

    Correct Answer: D

    The correct index to check for confirming a successful connection between a universal forwarder and an indexer in Splunk is index=_internal. This index contains logs and internal data for Splunk which helps in troubleshooting and validating the connection.

Discussion
NS2007Option: D

correct answer is D

ApisOption: D

D is correct

DeltaPotatoOption: D

D. index=_internal host=<forwarder_hostname>, page 183, System Admin PDF