Exam SPLK-1005 topic 1 question 19 discussion

The correct option is B. Excerpt from Splunk documentation, Managing Indexers and Clusters of Indexers > Indexes: Indexes As Splunk Enterprise processes incoming data, it adds the data to indexes. Splunk Enterprise ships with several indexes, and you can create additional indexes as needed. A Splunk Enterprise index contains a variety of files. These files fall into two main categories: 1. The raw data in compressed form (rawdata) 2. Indexes that point to the raw data (index files, also referred to as tsidx files), plus some metadata files Source: https://docs.splunk.com/Documentation/Splunk/9.4.0/Indexer/Aboutindexesandindexers#Indexes

Correct answer is D: Indexes contain two key file types: 1- Raw data in uncompressed form (rawdata) 2- Time Series Index files that point to raw data (tsidx files)