Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Splunk SPLK-1005 Exam - Topic 9 Question 30 Discussion

Given the following set of files, which of the monitor stanzas below will result in Splunk monitoring all of the files ending with .log?Files:/var/log/www1/secure.log/var/log/www1/access.log/var/log/www2/logs/secure.log/var/log/www2/access.log/var/log/www2/access.log.1
B) [monitor:///var/log/.../*.log]
A) [monitor:///var/log/*/*.log]
C) [monitor:///var/log/*/*]
D) [monitor:///var/log/.../*]

Splunk SPLK-1005 Exam - Topic 9 Question 30 Discussion

Actual exam question for Splunk's SPLK-1005 exam
Question #: 30
Topic #: 9
[All SPLK-1005 Questions]

Given the following set of files, which of the monitor stanzas below will result in Splunk monitoring all of the files ending with .log?

Files:

/var/log/www1/secure.log

/var/log/www1/access.log

/var/log/www2/logs/secure.log

/var/log/www2/access.log

/var/log/www2/access.log.1

Show Suggested Answer Hide Answer
Suggested Answer: B

The ellipsis (...) in [monitor:///var/log/.../*.log] allows Splunk to monitor files ending in .log in all nested directories under /var/log/. [Reference: Splunk Docs on monitor stanza syntax]


Contribute your Thoughts:

0/2000 characters
Mattie
5 hours ago
I think option B looks familiar because it uses the ellipsis, which might help capture all the nested directories.
upvoted 0 times
...
Bulah
5 days ago
I’m leaning towards option A, but I’m not confident it captures everything since it might miss files in nested folders.
upvoted 0 times
...
Katheryn
11 days ago
I practiced a similar question, and I feel like the option with the ellipsis is usually the right choice for deeper directory structures.
upvoted 0 times
...
Lucina
16 days ago
I'm not entirely sure, but I remember something about the asterisk being less specific than the ellipsis. Could that affect the results?
upvoted 0 times
...
Phyliss
2 months ago
I think option B looks familiar because it uses the ellipsis, which might help in capturing all subdirectories.
upvoted 0 times
...

Save Cancel