Splunk Core Certified Advanced Power User — Question 140

What action could be taken to prevent a license warning with an ingest-based license?

Answer options

• A. Add a new license before midnight on the indexer(s).
• B. Add a new license before midnight on the license manager.
• C. Delete the data before midnight on the indexer(s).
• D. Delete the data before midnight on the license manager.

Correct answer: B

Explanation

The correct answer is B because adding a new license on the license manager ensures that all associated indexers are covered by the updated licensing terms. The other options either focus on the indexer(s) where the license needs to be managed centrally, or suggest deleting data, which does not address the licensing issue directly.