Câu 39: SPLK-2002: Splunk Enterprise Certified Architect

A new Splunk customer is using syslog to collect data from their network devices on port 514. What is the best practice for ingesting this data into Splunk?

1. A. Configure syslog to send the data to multiple Splunk indexers.
2. B. Use a Splunk indexer to collect a network input on port 514 directly.
3. C. Use a Splunk forwarder to collect the input on port 514 and forward the data.
4. D. Configure syslog to write logs and use a Splunk forwarder to collect the logs. — đáp án hiện tại