ExamGecko
Question list
Search
Search

Question 63 - SPLK-1003 discussion

Report
Export

Within props. conf, which stanzas are valid for data modification? (select all that apply)

A.
Host
Answers
A.
Host
B.
Server
Answers
B.
Server
C.
Source
Answers
C.
Source
D.
Sourcetype
Answers
D.
Sourcetype
Suggested answer: A, C, D

Explanation:

https://docs.splunk.com/Documentation/Splunk/8.0.4/Admin/Propsconf#props.conf.spec

https://docs.splunk.com/Documentation/Splunk/8.1.1/Admin/Propsconf

"* Reuse of the same field-extracting regular expression across multiple sources, source types, or hosts." https://docs.splunk.com/Documentation/Splunk/8.0.4/Admin/Propsconf#props.conf.spec

asked 23/09/2024
Michel Flipse
41 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first