A Splunk administrator configured a scripted input to run a Bash script that outputs system uptime information. The script runs correctly when executed manually from the command line. However, the scripted input is not generating any events. The administrator checks splunkd.log and sees an error indicating the script exited with a non-zero exit code. What is the most likely cause?

The script is using a command that requires root privileges

The script requires environment variables that are only set in the interactive shell

The script output is too large for Splunk to process

The script is writing to standard error instead of standard output

What is the purpose of specifying credentials in a WMI input configuration?

To authenticate to the target Windows machine

To specify the index where the data will be stored

A Windows administrator wants to collect information about installed software from a group of Windows servers using WMI. The administrator wants to avoid installing additional software on the servers and prefers a solution that uses the existing Windows infrastructure. Which approach should the administrator use?

Configure a WMI input on each server's universal forwarder to query the Win32_Product class

Configure a network input to listen for WMI traffic on the network

Use a monitor input to watch the Windows registry for changes

Create a scripted input that runs a PowerShell script to query the registry for installed software

SplunkEnterprise Certified Admin

Domain 3Objective 5

Scripted and WMI Inputs SPLK-1003 Practice Questions (Page 3)

Part of the Getting Data In domain, which makes up ~17% of our current practice bank. Splunk does not publish an official question count, but from its 60-minute exam (~25–40 total, ~4–7 in this domain), expect 1–1 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

8concepts

Questions 11–15

11application · medium
A Splunk administrator configured a scripted input to run a Bash script that outputs system uptime information. The script runs correctly when executed manually from the command line. However, the scripted input is not generating any events. The administrator checks splunkd.log and sees an error indicating the script exited with a non-zero exit code. What is the most likely cause?
Select an answer first
12foundation · easy
What is the purpose of specifying credentials in a WMI input configuration?
Select an answer first
13foundation · easy
Which configuration parameter for a scripted input controls how often the script runs?
Select an answer first
14application · medium
A Windows administrator wants to collect information about installed software from a group of Windows servers using WMI. The administrator wants to avoid installing additional software on the servers and prefers a solution that uses the existing Windows infrastructure. Which approach should the administrator use?
Select an answer first
15foundation · easy
When configuring a scripted input, which parameter allows you to override the default source type for the data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-1003

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-1003” is a trademark of its owner, used for identification only.

Scripted and WMI Inputs SPLK-1003 Practice Questions (Page 3)

Questions 11–15

What is the purpose of specifying credentials in a WMI input configuration?

Which configuration parameter for a scripted input controls how often the script runs?

When configuring a scripted input, which parameter allows you to override the default source type for the data?

Keep studying — Getting Data In