Splunk Exam SPLK-1003 Topic 12 Question 65 Discussion

Actual exam question for Splunk's SPLK-1003 exam

Question #: 65
Topic #: 12

[All SPLK-1003 Questions]

Which of the following statements apply to directory inputs? {select all that apply)

AAll discovered text files are consumed.

BCompressed files are ignored by default

CSplunk recursively traverses through the directory structure.

DWhen adding new log files to a monitored directory, the forwarder must be restarted to take them into account.

Show Suggested Answer

Suggested Answer: C

Reference https://docs.splunk.com/Documentation/Splunk/8.2.3/Admin/Configurationparametersandthedatapipeline

by Jutta at Jan 09, 2023, 06:30 AM

Limited Time Offer

25%

Off

Get Premium SPLK-1003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sage

1 days ago

I'm not sure about D) though. Restarting the forwarder seems like a hassle.

upvoted 0 times

...

I'm pretty sure A, C, and D are correct. Splunk definitely recursively traverses directories, and the forwarder needs to be restarted to pick up new log files. But I'm not sure about the compressed files - I thought Splunk could handle those too.

upvoted 0 times

...

Wei

4 days ago

I agree with Timothy, C) is definitely true. It makes sense for directory inputs.

upvoted 0 times

...

Timothy

16 days ago

I think C) Splunk recursively traverses through the directory structure.

upvoted 0 times

...

Splunk Exam SPLK-1003 Topic 12 Question 65 Discussion

Contribute your Thoughts:

Sage

Sylvia

Wei

Timothy