Splunk Exam SPLK-1003 Topic 2 Question 66 Discussion

Actual exam question for Splunk's SPLK-1003 exam

Question #: 66
Topic #: 2

When using a directory monitor input, specific source types can be selectively overridden using which configuration file?

Asourcetypes . conf

Btrans forms . conf

Coutputs . conf

Dprops . conf

Show Suggested Answer

Suggested Answer: C

by Dorthy at Feb 05, 2023, 11:50 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

16 days ago

I'm not sure, but I think it might be B) trans forms . conf

upvoted 0 times

...

17 days ago

I think the answer is D) props.conf, since that's where you can configure source type overrides for directory monitors.

upvoted 0 times

...

20 days ago

I agree with Buddy, because sourcetypes . conf is used to override specific source types

upvoted 0 times

...

24 days ago

I think the answer is A) sourcetypes . conf

upvoted 0 times

...