MENU
Which of the following statements apply to directory inputs? {select all that apply)
Suggested Answer: C
Get Premium SPLK-1003 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
37 comments · newest first
CA
Carin
11 months ago
C is spot on, Splunk does traverse directories!
BA
Barabara
11 months ago
B is a fact, but I disagree with D.
ZI
Zita
12 months ago
Wait, compressed files are ignored by default? That’s surprising!
CA
Casie
12 months ago
I thought D was correct, but it’s not?
VI
Viki
12 months ago
A and C are definitely true!
VE
Verdell
1 year ago
For D, I vaguely recall that the forwarder doesn't need a restart for new log files, but I could be mistaken.
NO
Noble
1 year ago
I practiced a similar question, and I think B is true since compressed files are usually ignored by default unless configured otherwise.
AL
Alease
1 year ago
I'm not sure about A; I feel like not all text files are consumed, especially if there are certain filters in place.
MA
Ma
1 year ago
I think option C is definitely correct because I remember Splunk does traverse directories recursively.
DE
Delmy
1 year ago
Okay, let me review the options and see if I can identify the one that doesn't fit the typical use case.
DI
Dion
1 year ago
Okay, the key here is that the architect chose to use Per-Hop Behavior. That narrows it down a bit.
BE
Bethanie
1 year ago
Hmm, I'm a bit unsure about this one. The options seem pretty similar, but I'm leaning towards B - a rule is an event handler registered for specific kinds of node events.
DU
Dulce
1 year ago
Hmm, this looks like a tricky one. I'll need to carefully review the steps I've taken and make sure I've covered all the requirements.
LA
Lashawn
1 year ago
Ah, the age-old directory input dilemma. A, C, and D are like the holy trinity of Splunk knowledge. As for B, it's probably just there to see who's paying attention. I bet the Splunk devs have a good laugh every time someone gets caught out by that one.
DO
Dorthy
1 year ago
Hmm, let me think... A, C, and D sound right. But B? Really? Maybe Splunk is trying to trick us here. I bet the compressed files are actually consumed by default. Time to consult the Splunk docs again...
OT
Otis
1 year ago
Yeah, it's always good to verify before making any assumptions.
OL
Olga
1 year ago
I agree, let's double check the Splunk documentation to be sure.
NI
Nickie
1 year ago
I think A, C, and D are correct. B does seem a bit suspicious.
SH
Sharen
1 year ago
I think I got it figured out. A, C, and D are correct. As for the compressed files, who cares? Just unzip them first and let Splunk do its thing. Easy peasy!
MA
Marguerita
1 year ago
It's important to restart the forwarder when adding new log files to a monitored directory.
DA
Darrin
1 year ago
Yeah, just unzip the compressed files before adding them to Splunk.
FR
Francene
1 year ago
I agree, A, C, and D are the correct statements for directory inputs.
RO
Rory
1 year ago
Hah, this is an easy one! A, C, and D are definitely right. I always forget about that compressed file thing though. Is it B or the other way around? Anyway, I'm confident I'll nail this question.
MA
Mariann
1 year ago
Definitely. I'm feeling confident about this question now.
WI
Wilda
1 year ago
I always forget about the compressed files too. Good thing we're reviewing this.
LE
Leonardo
1 year ago
Yeah, that's correct. A, C, and D are the right statements.
RO
Rory
1 year ago
I think it's B. Compressed files are ignored by default.
JU
Junita
1 year ago
Definitely. I'm feeling confident about this question now.
JO
Johanna
1 year ago
I always forget about the compressed files too. Good thing we're reviewing this.
PA
Paulene
1 year ago
Yeah, you're right. A, C, and D are the correct statements.
NA
Nathalie
1 year ago
I think it's B. Compressed files are ignored by default.
SA
Sage
1 year ago
I'm not sure about D) though. Restarting the forwarder seems like a hassle.
SY
Sylvia
1 year ago
I'm pretty sure A, C, and D are correct. Splunk definitely recursively traverses directories, and the forwarder needs to be restarted to pick up new log files. But I'm not sure about the compressed files - I thought Splunk could handle those too.
AL
Alease
1 year ago
Actually, compressed files are ignored by default, so B is the correct statement.
WI
Wilford
1 year ago
I think A, C, and D are correct. Splunk does traverse directories and the forwarder needs to be restarted for new log files.
WE
Wei
1 year ago
I agree with Timothy, C) is definitely true. It makes sense for directory inputs.
TI
Timothy
2 years ago
I think C) Splunk recursively traverses through the directory structure.