Winter Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

SPLK-1003 Splunk Exam Lab Questions

Page: 11 / 14
Total 185 questions

Splunk Enterprise Certified Admin Questions and Answers

Question 41

Which of the following statements apply to directory inputs? {select all that apply)

Options:

A.

All discovered text files are consumed.

B.

Compressed files are ignored by default

C.

Splunk recursively traverses through the directory structure.

D.

When adding new log files to a monitored directory, the forwarder must be restarted to take them into account.

Question 42

What is the default value of LINE_BREAKER?

Options:

A.

\r\n

B.

([\r\n]+)

C.

\r+\n+

D.

(\r\n+)

Question 43

Consider the following stanza in inputs.conf:

What will the value of the source filed be for events generated by this scripts input?

Options:

A.

/opt/splunk/ecc/apps/search/bin/liscer.sh

B.

unknown

C.

liscer

D.

liscer.sh

Question 44

Where can scripts for scripted inputs reside on the host file system? (select all that apply)

Options:

A.

$SFLUNK_HOME/bin/scripts

B.

$SPLUNK_HOME/etc/apps/bin

C.

$SPLUNK_HOME/etc/system/bin

D.

$S?LUNK_HOME/etc/apps//bin_

Page: 11 / 14
Total 185 questions