Monitor Inputs SPLK-1003 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In a monitor input, which optional setting is used to exclude files that match a specific pattern from being ingested?

   • ASourcetype
   • BWhitelist
   • CIndex
   • DBlacklist
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which optional monitor input setting allows you to override the default host value assigned to ingested events?

   • ASource
   • BHost
   • CIndex
   • DSourcetype
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In inputs.conf, which stanza header is used to define a monitor input for a specific file?

   • A[tail:///var/log/app.log]
   • B[monitor:///var/log/app.log]
   • C[file:///var/log/app.log]
   • D[input:///var/log/app.log]
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In Splunk Web, which navigation path is used to create a monitor input for a specific file?

   • ASettings > Data inputs > HTTP Event Collector > New > File
   • BSettings > Data inputs > Forwarders > New > File
   • CSettings > Data inputs > Upload > New > File
   • DSettings > Data inputs > Files & directories > New > File
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An admin is configuring a monitor input for a file that is accessed by multiple servers. The admin wants to ensure that events from this file are tagged with the hostname of the server that generated the log. How can this be achieved?

   • AUse a transform in props.conf to override the host
   • BSet the index to a per-server index
   • CSet the host to the server hostname in the monitor input settings
   • DUse a regex in props.conf to extract the hostname from the log content
   Reveal Solution Discussion Select an answer first