Question

Which of the following are key differences between Self-Service and Splunk Managed Cloud instances?

1) Managed allows Whitelisting/Blacklisting of IP Addresses
2) Managed has a daily Data Ingestion maximum of 100GB
3) Self-Service deploys from the US East and US West Cloud regions
4) Self-Service allows for forwarder configuration using Splunk Web
5) Concurrent search on Self-Service has a limit of 20

Answer 1

Self-Service and Splunk Managed Cloud instances differ mainly in IP address management, deployment regions, forwarder configuration, and search limits. Managed instances allow IP Whitelisting/Blacklisting, and do not have a set data ingestion limit, whereas Self-Service instances can deploy in specific regions and allow direct configuration via Splunk Web. 1) Managed allows Whitelisting/Blacklisting of IP Addresses is correct option.

Step-by-step explanation:

The key differences between Self-Service and Splunk Managed Cloud instances revolve around various aspects such as IP address management, data ingestion limits, deployment regions, forwarder configuration, and search limits. In Splunk Managed Cloud instances, customers can request Whitlisting/Blacklisting of IP Addresses, ensuring secure access to their environment.

Additionally, Managed service level agreements (SLAs) typically do not define a fixed daily data ingestion maximum like 100GB; this may vary based on customer needs and can often be scaled much higher.

In contrast, Self-Service offerings allow users to deploy from specific cloud regions, such as US East and US West. With Self-Service, users also have the flexibility to configure forwarders directly using Splunk Web, which is part of Splunk's web interface for managing and searching data.

The limit of 20 concurrent searches typically applies to smaller, Self-Service instances, rather than being a hard limit.