Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Splunk Exam SPLK-1005 Topic 12 Question 14 Discussion

Actual exam question for Splunk's SPLK-1005 exam
Question #: 14
Topic #: 12
[All SPLK-1005 Questions]

Which of the following files is used for both search-time and index-time configuration?

Show Suggested Answer Hide Answer
Suggested Answer: B

The props.conf file is a crucial configuration file in Splunk that is used for both search-time and index-time configurations.

At index-time, props.conf is used to define how data should be parsed and indexed, such as timestamp recognition, line breaking, and data transformations.

At search-time, props.conf is used to configure how data should be searched and interpreted, such as field extractions, lookups, and sourcetypes.

B . props.conf is the correct answer because it is the only file listed that serves both index-time and search-time purposes.

Splunk Documentation Reference:

props.conf - configuration for search-time and index-time


by Belen at Apr 03, 2025, 04:56 AM

Limited Time Offer

25%

Off

Get Premium SPLK-1005 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Eileen
18 days ago
Hmm, I think I'll go with B) props.conf. It's the Gandalf of Splunk files - the one that knows all the secrets.
upvoted 0 times
...
Darrel
19 days ago
I'm confident that B) props.conf is the correct answer. It's like the junk drawer of Splunk - it has everything you need!
upvoted 0 times
...
Rory
21 days ago
I was just about to say the same thing! props.conf is the Swiss Army knife of Splunk configuration files.
upvoted 0 times
...
Cordelia
23 days ago
B) props.conf is definitely the right answer. It's the go-to file for both search-time and index-time configurations.
upvoted 0 times
...
Yasuko
1 months ago
I'm not sure, but I think savesearch.conf is also used for configuration.
upvoted 0 times
...
Glynda
1 months ago
I agree with Stevie, props.conf is used for both search-time and index-time configuration.
upvoted 0 times
...
Stevie
2 months ago
I think the answer is B) props.conf.
upvoted 0 times
...

Save Cancel