Splunk Exam SPLK-2002 Topic 13 Question 82 Discussion

Actual exam question for Splunk's SPLK-2002 exam

Question #: 82
Topic #: 13

[All SPLK-2002 Questions]

When troubleshooting a situation where some files within a directory are not being indexed, the ignored files are discovered to have long headers. What is the first thing that should be added to inputs.conf?

ADecrease the value of initCrcLength.

BAdd a crcSalt=<string> attribute.

CIncrease the value of initCrcLength.

DAdd a crcSalt=<SOURCE> attribute.

Show Suggested Answer

Suggested Answer: D

by Rima at Mar 08, 2024, 12:07 PM

Limited Time Offer

25%

Off

Get Premium SPLK-2002 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rikki

2 months ago

Ah, the joys of troubleshooting Splunk! I bet the engineers who came up with crcSalt had a good laugh. B is the way to go, for sure.

upvoted 0 times

Jonell

4 days ago

Definitely, crcSalt= is the key to resolving this issue.

upvoted 0 times

...

Dorothy

10 days ago

Yeah, that should help with the long headers causing the files to be ignored.

upvoted 0 times

...

Chantay

12 days ago

I agree, adding a crcSalt= attribute should do the trick.

upvoted 0 times

...

Loren

2 months ago

But wouldn't increasing the value of initCrcLength also help in this situation?

upvoted 0 times

...

Elke

2 months ago

Eve

upvoted 0 times

Laticia

23 days ago

C) Increase the value of initCrcLength.

upvoted 0 times

...

Laticia

2 months ago

Should we also try increasing the value of initCrcLength?

upvoted 0 times

...

Laticia

2 months ago

B) Add a crcSalt= attribute.

upvoted 0 times

...

Yuriko

2 months ago

I disagree, I believe the correct answer is D) Add a crcSalt= attribute.

upvoted 0 times

...

Loren

3 months ago

I think the answer is B) Add a crcSalt= attribute.

upvoted 0 times

...