ExamGecko
Question list
Search
Search

Question 36 - SPLK-1003 discussion

Report
Export

Which of the following are supported configuration methods to add inputs on a forwarder? (select all that apply)

A.
CLI
Answers
A.
CLI
B.
Edit inputs . conf
Answers
B.
Edit inputs . conf
C.
Edit forwarder.conf
Answers
C.
Edit forwarder.conf
D.
Forwarder Management
Answers
D.
Forwarder Management
Suggested answer: A, B, D

Explanation:

https://docs.splunk.com/Documentation/Forwarder/8.2.1/Forwarder/HowtoforwarddatatoSplunkEnterprise

"You can collect data on the universal forwarder using several methods. Define inputs on the universal forwarder with the CLI. You can use the CLI to define inputs on the universal forwarder.

After you define the inputs, the universal forwarder collects data based on those definitions as long as it has access to the data that you want to monitor. Define inputs on the universal forwarder with configuration files. If the input you want to configure does not have a CLI argument for it, you can configure inputs with configuration files. Create an inputs.conf file in the directory, $SPLUNK_HOME/etc/system/local

asked 23/09/2024
Okan YILDIZ
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first