Which of the following is a valid monitor stanza for inputs.conf?
A.
[monitor:///var/log/*.log] index = linux sourcetype = access_combined host = 489307057
B.
[monitor:\\\var\log\httpd-[0-9].log] index = linux sourcetype = access_combined host = 489307057
C.
[monitor:///var/log/httpd-[0-9].log] index = linux sourcetype = access_combined host = 489307057
D.
[monitor:\\\var\log\*.log] index = linux sourcetype = access_combined host = 489307057
The Answer Is:
C
This question includes an explanation.
Explanation:
Explanation: [monitor:///var/log/httpd-[0-9].log] is a valid path and syntax for inputs.conf to monitor files ending in .log under /var/log, with other correct index, sourcetype, and host settings specified. [Reference: Splunk Docs on monitor stanzas]
SPLK-1005 PDF/Engine
Printable Format
Value of Money
100% Pass Assurance
Verified Answers
Researched by Industry Experts
Based on Real Exams Scenarios
100% Real Questions
Get 60% Discount on All Products,
Use Coupon: "8w52ceb345"