Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Splunk Exam SPLK-1003 Topic 4 Question 105 Discussion

Actual exam question for Splunk's SPLK-1003 exam
Question #: 105
Topic #: 4
[All SPLK-1003 Questions]

In inputs. conf, which stanza would mean Splunk was only reading one local file?

Show Suggested Answer Hide Answer
Suggested Answer: B

[monitor::/opt/log/crashlog/Jan27crash.txt].This stanza means that Splunk is monitoring a single local file named Jan27crash.txt in the /opt/log/crashlog/ directory1.The monitor input type is used to monitor files and directories for changes and index any new data that is added2.


by Rafael at Nov 29, 2024, 10:19 AM

Limited Time Offer

25%

Off

Get Premium SPLK-1003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Kimbery
4 months ago
Option B? Really? What is this, amateur hour? Everyone knows Splunk doesn't use colons in its file paths. Clearly A is the correct answer.
upvoted 0 times
...
Chandra
5 months ago
Pfft, this is easy. Everyone knows you use the 'monitor' stanza to watch directories, not files. A all the way, baby!
upvoted 0 times
Glenna
3 months ago
B) [monitor::/opt/log/crashlog/Jan27crash.txt]
upvoted 0 times
...
Zona
3 months ago
Exactly, the 'read' stanza is for reading specific files, not directories.
upvoted 0 times
...
Carin
4 months ago
A) [read://opt/log/crashlog/Jan27crash.txt]
upvoted 0 times
...
...
Deeann
5 months ago
Hmm, I'm torn between A and D. D looks like it's reading the whole directory and a specific file, but A is more straightforward. Decisions, decisions...
upvoted 0 times
...
Johna
5 months ago
I'm going with C. The '///' in the path means it's reading the entire directory, not just a single file.
upvoted 0 times
...
Renea
5 months ago
Option A looks right to me, the 'read://' stanza is used for reading a single local file.
upvoted 0 times
Wayne
3 months ago
That's incorrect. The 'monitor://' stanza is used for monitoring directories, not single files.
upvoted 0 times
...
Casie
3 months ago
C) [monitor:///opt/log/]
upvoted 0 times
...
Deonna
4 months ago
Yes, that's correct. The 'read://' stanza is used for reading a single local file.
upvoted 0 times
...
Lemuel
4 months ago
A) [read://opt/log/crashlog/Jan27crash.txt]
upvoted 0 times
...
...
Alverta
5 months ago
I disagree, I believe the answer is B) [monitor::/opt/log/crashlog/Jan27crash.txt] because it specifies monitoring a specific file.
upvoted 0 times
...
Estrella
5 months ago
I think the answer is A) [read://opt/log/crashlog/Jan27crash.txt].
upvoted 0 times
...

Save Cancel