Splunk Exam SPLK-1003 Topic 2 Question 66 Discussion

Actual exam question for Splunk's SPLK-1003 exam

Question #: 66
Topic #: 2

When using a directory monitor input, specific source types can be selectively overridden using which configuration file?

Asourcetypes . conf

Btrans forms . conf

Coutputs . conf

Dprops . conf

Show Suggested Answer

Suggested Answer: C

by Dorthy at Feb 05, 2023, 11:50 PM

Limited Time Offer

25%

Off

Get Premium SPLK-1003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Arlyne

20 days ago

I'm going with D) props.conf. Gotta love those Splunk config files - they're like a secret language that only the true nerds understand.

upvoted 0 times

...

Emiko

26 days ago

Ha, I bet the person who wrote this question was having a laugh. 'sourcetypes.conf'? Really? That's not even a thing!

upvoted 0 times

...

Lashawn

30 days ago

Hmm, I was thinking B) transforms.conf, but now that I think about it, that's more for transforming the data, not overriding source types. D) props.conf makes more sense.

upvoted 0 times

Kizzy

20 hours ago

Yes, transforms.conf is more for transforming the data.

upvoted 0 times

...

Rosendo

14 days ago

I agree, D) props.conf is used for overriding source types.

upvoted 0 times

...

Cyril

2 months ago

I'm not sure, but I think it might be B) trans forms . conf

upvoted 0 times

...

2 months ago

I think the answer is A) sourcetypes . conf

upvoted 0 times

...