Free Preparation Discussions
MENU
Splunk Exam SPLK-1003 Topic 10 Question 86 Discussion
Topic #: 10
Windows can prevent a Splunk forwarder from reading open files. If files need to be read while they are being written to, what type of input stanza needs to be created?
The correct answer is C. MonitorNoHandle.
The other options are incorrect because:
An input stanza is a section in the inputs.conf configuration file that defines the settings for a specific type of input, such as files, directories, network ports, scripts, or Windows event logs. An input stanza starts with a square bracket, followed by the input type and the input path or name. For example, [monitor:///var/log] is an input stanza for monitoring the /var/log directory.
1: Monitor files and directories - Splunk Documentation
2: How to configure props.conf for proper line breaking ... - Splunk Community
3: How Splunk Enterprise monitors files and directories - Splunk Documentation
4: Upload a file - Splunk Documentation
5: Use forwarders to get data into Splunk Enterprise - Splunk Documentation
[6]: inputs.conf - Splunk Documentation
Phillip
6 months agoChana
6 months agoNydia
6 months agoChana
7 months agoLarae
7 months agoNydia
7 months agoNichelle
8 months agoOrville
8 months agoLilli
8 months agoNichelle
8 months ago