Exam SPLK-1003 topic 1 question 145 discussion

C. See scripted input: https://docs.splunk.com/Documentation/Splunk/9.2.1/Admin/Inputsconf [script://<cmd>] interval = [<decimal>|<cron schedule>] * The special value "0" forces this scripted input to be run continuously. As soon as the script exits, the input restarts it. * The special value "-1" causes the scripted input to run once on start-up. * NOTE: when you specify a cron schedule, the input does not run the script on start-up. * Default: 60.0

C Splunk documentation explains the following: "The "interval" setting is used to specify how often the scripted input runs, either in seconds or using a cron schedule. In this case, the script "myscript.sh" is set to run continuously, with an interval of 0 seconds. This means that as soon as the script exits, it will be restarted by the Splunk system, resulting in it running continuously." source: https://docs.splunk.com/Special:SplunkSearch/docs?q=%5Bscript%3A%2F%2Fmyscript.sh%5D%20interval%3D0&size=n_10_n

The answer is C. Setting interval=0 in Splunk's inputs.conf file means the script will keep running continuously. As soon as the script finishes executing, Splunk will immediately restart it.

Interval = 0 means it runs upon adding the input, and then each time the server is restarted.

the interval setting specifiels the time, in seconds, between runs of the script. Setting interval=0 in Splunk's inputs.conf file means the script will keep running continuously. As soon as the script finishes executing, Splunk will immediately restart it.

Should be B. By setting 'interval=0', you're instructing Splunk to execute the script a single time at the startup of the Splunk service. After the initial execution, Splunk will not run the script again unless the service is restarted.