splk-1003 question 106 discussion

View all Splunk Enterprise Certified Admin Exam here
back to splunk forum

Question 106

Which of the following monitor inputs stanza headers would match all of the following files?
/var/log/www1/secure.log
/var/log/www/secure.l
/var/log/www/logs/secure.logs
/var/log/www2/secure.log

  • A. [monitor:///var/log/.../secure.*
  • B. [monitor:///var/log/www1/secure.*]
  • C. [monitor:///var/log/www1/secure.log]
  • D. [monitor:///var/log/www*/secure.*]
Answer:

C


Explanation:
Reference:
https://docs.splunk.com/Documentation/Splunk/8.2.1/Data/Monitorfilesanddirectorieswithinputs.c
onf

User Votes:
A 1 votes
50%
B
50%
C
50%
D
50%
Discussions
0 / 1000
stecolman
5 months, 1 week ago

C would not match /var/log/www2/secure.log - so you can rule it out - the ... means that it traverses thru the directory structure.

0