Answer-first summary for fast verification
Answer: Create an Amazon Kineses Data Firehose delivery stream to use Splunk as the destination. Create a CloudWatch Logs subscription filter to send log events to the delivery stream.
Option B is CORRECT because creating an Amazon Kinesis Data Firehose delivery stream to use Splunk as the destination and setting up a CloudWatch Logs subscription filter to send log events to the delivery stream provides a fully managed and seamless integration with minimal operational overhead. Kinesis Data Firehose natively supports Splunk as a destination and handles data transformation, batching, and delivery to Splunk in near real-time.
Author: Ritesh Yadav
Ultimate access to all questions.
Question 23/60
A company plans to provision a log delivery stream within a VPC. The company configured the VPC flow logs to publish to Amazon CloudWatch Logs. The company needs to send the flow logs to Splunk in near real time for further analysis.
Which solution will meet these requirements with the LEAST operational overhead?
A
Configure an Amazon Kinesis Data Streams data stream to use Splunk as the destination. Create a CloudWatch Logs subscription filter to send log events to the data stream.
B
Create an Amazon Kineses Data Firehose delivery stream to use Splunk as the destination. Create a CloudWatch Logs subscription filter to send log events to the delivery stream.
C
Create an Amazon Kinesis Data Firehose delivery stream to use Splunk as the destination. Create an AWS Lambda function to send the flow logs from CloudWatch Logs to the delivery stream.
D
Configure an Amazon Kinesis Data Streams data stream to use Splunk as the destination. Create an AWS Lambda function to send the flow logs from CloudWatch Logs to the data stream.
No comments yet.