Discuss LPI 701-100 Exam Topic 2 Question 9

A recently installed application writes log data to /opt/app/log/info.log. If Filebeat is already installed and set up for communication with a remote Logstash, what has to be done in order to submit the log data of the new application to Logstash?

AAdd an additional input channel with the option source => ''/opt/app/log/info.log'' to the Logstash configuration.

BConfigure logrotate to execute filebeat --I /opt/app/log/info.log 0 after each rotation of /opt/app/log/info.log.

CAdd the log file to the path option within the log prospector in the Filebeat configuration and restart Filebeat.

DAdd a new cron job that invokes filebeat --i /opt/app/log/info.log periodically.

EReplace /opt/app/log/info.log by a symbolic link to /dev/filebeat and restart the new application.

Suggested Answer: E

Get Premium 701-100 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Jannette 11 months ago

A symbolic link to /dev/filebeat? That sounds weird, is that even a thing?

Nakisha 12 months ago

Option A seems like a good choice too, but C is simpler.

Viola 12 months ago

Wait, why would you use a cron job for this? Sounds unnecessary.

Pura 12 months ago

Totally agree, option C is the way to go!

Marnie 1 year ago

Just add the log file to the Filebeat config and restart it.

Leslie 1 year ago

I don't recall needing to set up a cron job for Filebeat. It seems like we should just update the Filebeat config and restart it.

Mammie 1 year ago

Adding an input channel directly to Logstash sounds familiar, but I feel like that’s not the right approach for this scenario.

Arlyne 1 year ago

I remember a practice question where we had to configure Filebeat to read a new log file. I think it was about modifying the prospector settings.

Hayley 1 year ago

I think we need to add the log file to the Filebeat configuration, but I'm not sure if it's the path option or something else.

Leonardo 1 year ago

Whoa, this is a lot of information to take in. I better take my time and really analyze each part of the question carefully. Rushing through this could lead me to the wrong answer, so I'll be sure to read everything thoroughly.

Trinidad 1 year ago

Hmm, I'm not too sure about this one. I'll have to think it through carefully.

Kimi 1 year ago

This question seems straightforward, I think I know the answer but I'll double-check my notes just to be sure.

Quinn 1 year ago

This is a tricky one, but I think the answer is C. Using a 'SSH Username with private key' credential scoped to 'Agents' should give us the security we need without exposing the key to regular users. I'll make sure to set that up properly.

Naomi 1 year ago

That question about finding the right combination seems similar to the practice questions we did on interest rate derivatives. I think selling a floor and buying a cap makes sense.

LPI 701-100 Exam - Topic 2 Question 9 Discussion