Splunk Enterprise Certified Admin (SPLK-1003) - 340 Questions

1. A Splunk administrator needs to install Splunk Enterprise on a Linux server for the first time. Which command installs the Splunk RPM package and accepts the license agreement non-interactively?

2. A company's Splunk deployment requires the web interface to listen on port 8443 instead of the default 8000. Which configuration file and stanza should the administrator modify?

3. An organization wants to configure a Splunk Universal Forwarder to send data to two different indexers for load balancing. Which configuration achieves this in outputs.conf?

4. A Splunk administrator is planning a distributed deployment. Which component is responsible for directing search requests to indexers and merging results?

5. A Splunk administrator needs to deploy a new app to 500 Universal Forwarders automatically. Which Splunk component should be used to manage this deployment?