ExamGecko
Question list
Search
Search

List of questions

Search

Question 61 - SPLK-1005 discussion

Report
Export

Which of the following is a valid monitor stanza for inputs.conf?

A.

[monitor:///var/log/*.log] index = linux sourcetype = access_combined host = 489307057

Answers
A.

[monitor:///var/log/*.log] index = linux sourcetype = access_combined host = 489307057

B.

[monitor:\\\var\log\httpd-[0-9].log] index = linux sourcetype = access_combined host = 489307057

Answers
B.

[monitor:\\\var\log\httpd-[0-9].log] index = linux sourcetype = access_combined host = 489307057

C.

[monitor:///var/log/httpd-[0-9].log] index = linux sourcetype = access_combined host = 489307057

Answers
C.

[monitor:///var/log/httpd-[0-9].log] index = linux sourcetype = access_combined host = 489307057

D.

[monitor:\\\var\log\*.log] index = linux sourcetype = access_combined host = 489307057

Answers
D.

[monitor:\\\var\log\*.log] index = linux sourcetype = access_combined host = 489307057

Suggested answer: C

Explanation:

[monitor:///var/log/httpd-[0-9].log] is a valid path and syntax for inputs.conf to monitor files ending in .log under /var/log, with other correct index, sourcetype, and host settings specified. [Reference: Splunk Docs on monitor stanzas]

asked 13/11/2024
Maurizio Toniato
31 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first