Splunk SPLK-1003 Exam - Topic 5 Question 126 Discussion

Actual exam question for Splunk's SPLK-1003 exam

Question #: 126
Topic #: 5

[All SPLK-1003 Questions]

During search time, which directory of configuration files has the highest precedence?

A$SFLUNK_KOME/etc/system/local

B$SPLUNK_KCME/etc/system/default

C$SPLUNK_HCME/etc/apps/app1/local

D$SPLUNK HCME/etc/users/admin/local

Show Suggested Answer

Suggested Answer: D

by Margurite at Apr 08, 2026, 02:54 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

18 days ago

Totally agree, it's always system/local first!

upvoted 0 times

...

23 days ago

A) $SPLUNK_KOME/etc/system/local has the highest precedence.

upvoted 0 times

...

1 month ago

I remember something about user-specific configurations having higher precedence, so maybe option D is the answer?

upvoted 0 times

...

1 month ago

I’m not entirely sure, but I feel like the default directory is lower in precedence than local directories.

upvoted 0 times

...

2 months ago

I practiced a similar question where the local directory had the highest priority, so I’m leaning towards option A or D.

upvoted 0 times

...

2 months ago

I think the highest precedence is usually the local directory, but I can't remember which one that is.

upvoted 0 times

...