Splunk Enterprise Certified Architect — Question 61
Which props.conf setting has the least impact on indexing performance?
Answer options
- A. CHARSET
- B. TIME_PREFIX
- C. SHOULD_LINEMERGE
- D. TRUNCATE
Correct answer: A
Explanation
The CHARSET setting primarily influences character encoding and does not significantly affect how quickly data is indexed, making it the least impactful option. In contrast, TIME_PREFIX, SHOULD_LINEMERGE, and TRUNCATE all play more critical roles in how data is processed and organized during indexing, thereby impacting performance more directly.