Splunk Core Certified Advanced Power User — Question 172

How do you remove missing forwarders from the Monitoring Console?

Answer options

• A. By restarting Splunk.
• B. By rescanning active forwarders.
• C. By reloading the deployment server.
• D. By rebuilding the forwarder asset table.

Correct answer: D

Explanation

The correct answer is D, as rebuilding the forwarder asset table refreshes the list of active forwarders and removes any that are no longer present. The other options do not specifically address the removal of missing forwarders; restarting Splunk (A) or reloading the deployment server (C) would not eliminate the missing entries, and rescanning active forwarders (B) may not effectively update the asset table.