MENU
What Splunk command will allow an administrator to view the runtime configuration instructions for a monitored file in Inputs. cont on the forwarders?
Suggested Answer: C
Get Premium SPLK-1005 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
To view the runtime configuration instructions for a monitored file in inputs.conf on the forwarder, the correct command to use involves accessing the internal REST API that provides details on data inputs.
C . ./splunk _internal rest /services/data/inputs/monitor is the correct answer. This command uses Splunk's internal REST endpoint to retrieve information about monitored files, including their runtime configurations as defined in inputs.conf.
Splunk Documentation Reference:
Splunk REST API - Data Inputs
22 comments · newest first
AL
Allene
9 months ago
B is a good option too, but not for this specific case.
PE
Peggie
9 months ago
Wait, is it really C? I thought inputs.conf would be involved somehow.
FA
Fairy
9 months ago
I thought it was A at first, but C makes more sense.
LA
Laurel
10 months ago
Definitely agree with C! It's the most accurate one.
MA
Margart
11 months ago
I think the answer is C. That's the right command for monitored files.
PA
Page
11 months ago
I’m really unsure, but I think option B might show the config, though it doesn’t seem specific to runtime instructions.
TR
Trina
11 months ago
I feel like I saw a similar question about monitoring inputs, and I think it was about using the internal call. Could be A?
ME
Melinda
11 months ago
I remember practicing with inputs.conf, but I'm not sure if that's the right command for this question.
IV
Ivette
11 months ago
I think the command to view runtime configurations is related to the REST API, so maybe it's option C?
KA
Karina
12 months ago
I'm a little confused by the wording of this question. Is it asking for a specific command to view the configuration for a file monitor, or just the general command to view the Inputs.conf file? I'll need to re-read it carefully.
EA
Earlean
12 months ago
Okay, I've got this. The command to view the runtime configuration for a monitored file in Inputs.conf on the forwarders is ./splunk show config inputs.conf. That should do the trick.
CH
Charlette
12 months ago
Hmm, I'm a bit unsure about this one. There are a few different Splunk commands related to configuration, so I'll need to think carefully about which one is most relevant here.
MY
Myra
1 year ago
This looks like a straightforward Splunk configuration question. I think the key is to focus on the specific command that would allow an admin to view the runtime configuration for a monitored file.
AS
Ashlee
1 year ago
Haha, this question is a real head-scratcher! I'm going to guess D. The 'show config inputs' command just sounds more intuitive to me, even if it's not the technically correct answer.
TE
Tegan
1 year ago
Hmm, I'm not so sure about that. I think the correct answer might be C. The '_internal rest' command is used to access the Splunk REST API, and the '/services/data/inputs/monitor' endpoint seems like it would provide the runtime configuration for monitored files.
DA
Daniel
1 year ago
I'm pretty sure the answer is B. The 'show config' command is used to view the configuration of various components in Splunk, and 'inputs.conf' is the file that contains the configuration for monitored files.
LO
Lore
10 months ago
A is interesting, but I agree with B for inputs.conf.
MA
Mauricio
10 months ago
I think B is the right choice too. It makes sense for inputs.
DE
Devorah
10 months ago
I’m leaning towards C. It seems more specific for monitoring.
VA
Valentine
10 months ago
D could be useful, but B is definitely the best option here.
AM
Amie
1 year ago
I agree with Leah, because the command 'show config inputs.conf' seems like it would display the configuration instructions for monitored files.
LE
Leah
1 year ago
I think the answer is B) ./splunk show config inputs.conf