Splunk Enterprise Certified Admin Practice Test

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the Splunk Enterprise Certified Admin Exam. Access flashcards and multiple-choice questions, each question comes with insights and explanations. Ace your exam with confidence!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


Which of the following protocols is not supported for indexing metrics?

  1. StatsD over UDP/TCP

  2. FTP

  3. StatsD with dimensions over UDP/TCP

  4. Collectd over HTTPS using HTTP Event Collector (HEC)

The correct answer is: FTP

The correct answer highlights that FTP is not a protocol designed for real-time data collection and indexing in a metrics context. Instead, FTP (File Transfer Protocol) is primarily used for transferring files over a network and is not suited for the efficient real-time ingestion of metric data. Metrics typically require protocols that can handle continuous streams of data with minimal latency, which isn't a characteristic of FTP. In contrast, the other options involve protocols and methods specifically geared toward metrics collection. StatsD over UDP/TCP and StatsD with dimensions leverage the capabilities of StatsD for aggregating and sending metrics data efficiently. Collectd over HTTPS using HTTP Event Collector (HEC) is tailored for metrics as well, allowing secure transport of metrics data in real time. These protocols are optimized for collecting metrics, thus fitting within the requirements for indexing metrics in Splunk.