Create File and Directory Monitor Inputs CLOUD-CERTIFIED-ADMIN Practice Questions (Page 3)

Questions 11–13

1. 11foundation · easy

   A monitor input is configured but no data is appearing in Splunk. What is the most likely cause if the file path is correct?

   • AThe index is full
   • BThe Splunk service account does not have read permission on the file
   • CThe file is not in UTF-8 format
   • DThe file is too large to be indexed
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which scenario is best suited for using a directory monitor input in Splunk?

   • AIndexing data from a remote API endpoint
   • BIndexing all log files that are created in a specific folder
   • CIndexing a single, static configuration file
   • DIndexing data from a database table
   Reveal Solution Discussion Select an answer first
3. 13foundation · easy

   How does Splunk handle file rotation for monitored files?

   • AIt deletes the rotated file from the filesystem
   • BIt stops monitoring the file entirely until manually restarted
   • CIt merges the rotated file with the original file in the index
   • DIt detects the new file and continues indexing from the beginning of the rotated file
   Reveal Solution Discussion Select an answer first