Which of the following are required when defining an index in indexes.conf? (Choose all that apply.)
Which of the following are required when defining an index in indexes.conf? (Choose all that apply.)
When defining an index in indexes.conf, certain paths are required for proper index management. The coldPath specifies the location of cold databases, which store older data that is still searchable but less frequently accessed. The homePath is critical as it contains the hot and warm databases, which store newly indexed and frequently accessed data. The thawedPath is also necessary because it contains the resurrected databases, allowing data recovery from archived storage. Though frozenPath is mentioned, it is not required because it mainly deals with data that is no longer searchable and has been removed. Therefore, the required paths are coldPath, homePath, and thawedPath.
D is wrong frozen bucket are not required thus thawedPath is also not required
A, B & D are correct
confirmed here: https://docs.splunk.com/Documentation/Splunk/9.0.3/Admin/Indexesconf
thawed path is optional not required from sys admin page 103
Check splunk docs on indexes.conf: thawedPath = <string> * An absolute path that contains the thawed (resurrected) databases for the index. * CANNOT contain a volume reference. * Path must be writable. * Required. Splunkd does not start if an index lacks a valid thawedPath. <-----
Thawed path is REQUIRED.
Answers are A, B, and D. Quoting the Splunk Reference URL https://docs.splunk.com/Documentation/Splunk/6.5.0/Admin/Indexesconf homePath = <path on index server> * An absolute path that contains the hotdb and warmdb for the index. coldPath = <path on index server> * An absolute path that contains the colddbs for the index. thawedPath = <path on index server> * An absolute path that contains the thawed (resurrected) databases for the index.
Answer: ABD https://docs.splunk.com/Documentation/Splunk/8.1.1/Admin/Indexesconf thawedPath = <string> * Required. Splunkd does not start if an index lacks a valid thawedPath.
A B D looks correct to me
ABD - System Admin PDF, page 125. Paths must be specified, even when using the defaults.
In the GUI these are all listed as optional, but in the documentation for indexes.conf they are required (except frozen)