Splunk SPLK-1005 Exam - Topic 11 Question 19 Discussion

Actual exam question for Splunk's SPLK-1005 exam

Question #: 19
Topic #: 11

What Splunk command will allow an administrator to view the runtime configuration instructions for a monitored file in Inputs. cont on the forwarders?

A./splunk _internal call /services/data/input.3/filemonitor

B./splunk show config inputs.conf

C./splunk _internal rest /services/data/inputs/monitor

D./splunk show config inputs

Show Suggested Answer

Suggested Answer: C

To view the runtime configuration instructions for a monitored file in inputs.conf on the forwarder, the correct command to use involves accessing the internal REST API that provides details on data inputs.

C . ./splunk _internal rest /services/data/inputs/monitor is the correct answer. This command uses Splunk's internal REST endpoint to retrieve information about monitored files, including their runtime configurations as defined in inputs.conf.

Splunk Documentation Reference:

Splunk REST API - Data Inputs

by Martina at Aug 04, 2025, 03:59 AM

Limited Time Offer

25%

Off

Get Premium SPLK-1005 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Allene

5 months ago

B is a good option too, but not for this specific case.

upvoted 0 times

...

Peggie

5 months ago

Wait, is it really C? I thought inputs.conf would be involved somehow.

upvoted 0 times

...

Fairy

5 months ago

I thought it was A at first, but C makes more sense.

upvoted 0 times

...

Laurel

5 months ago

Definitely agree with C! It's the most accurate one.

upvoted 0 times

...

Margart

6 months ago

I think the answer is C. That's the right command for monitored files.

upvoted 0 times

...

Page

6 months ago

I’m really unsure, but I think option B might show the config, though it doesn’t seem specific to runtime instructions.

upvoted 0 times

...

Trina

7 months ago

I feel like I saw a similar question about monitoring inputs, and I think it was about using the internal call. Could be A?

upvoted 0 times

...

Melinda

7 months ago

I remember practicing with inputs.conf, but I'm not sure if that's the right command for this question.

upvoted 0 times

...

Ivette

7 months ago

I think the command to view runtime configurations is related to the REST API, so maybe it's option C?

upvoted 0 times

...

Karina

7 months ago

I'm a little confused by the wording of this question. Is it asking for a specific command to view the configuration for a file monitor, or just the general command to view the Inputs.conf file? I'll need to re-read it carefully.

upvoted 0 times

...

Earlean

7 months ago

Okay, I've got this. The command to view the runtime configuration for a monitored file in Inputs.conf on the forwarders is ./splunk show config inputs.conf. That should do the trick.

upvoted 0 times

...

Charlette

7 months ago

Hmm, I'm a bit unsure about this one. There are a few different Splunk commands related to configuration, so I'll need to think carefully about which one is most relevant here.

upvoted 0 times

...

Myra

8 months ago

This looks like a straightforward Splunk configuration question. I think the key is to focus on the specific command that would allow an admin to view the runtime configuration for a monitored file.

upvoted 0 times

...

Ashlee

8 months ago

Haha, this question is a real head-scratcher! I'm going to guess D. The 'show config inputs' command just sounds more intuitive to me, even if it's not the technically correct answer.

upvoted 0 times

...

Tegan

8 months ago

Hmm, I'm not so sure about that. I think the correct answer might be C. The '_internal rest' command is used to access the Splunk REST API, and the '/services/data/inputs/monitor' endpoint seems like it would provide the runtime configuration for monitored files.

upvoted 0 times

...

Daniel

8 months ago

I'm pretty sure the answer is B. The 'show config' command is used to view the configuration of various components in Splunk, and 'inputs.conf' is the file that contains the configuration for monitored files.

upvoted 0 times