Splunk Core Certified Advanced Power User — Question 71

Which of the following are required when defining an index in indexes.conf? (Choose all that apply.)

Answer options

• A. coldPath
• B. homePath
• C. frozenPath
• D. thawedPath

Correct answer: A, B, D

Explanation

The correct options are coldPath, homePath, and thawedPath, as these are mandatory settings for defining an index in indexes.conf. The frozenPath is not required, as it is used for managing data that is no longer actively needed.