Exam SPLK-1005 topic 1 question 6 discussion

When configuring file and directory monitor inputs in inputs.conf, the following settings are valid: 1. host: Sets the host field for the input data. 2. index: Specifies the index where the data will be stored. 3. sourcetype: Defines the type of data for parsing and categorization. 4. _TCP_Routing: Specifies routing rules for forwarding data to specific indexers. 5. host_regex: Extracts the host field using a regular expression applied to the file path. 6. host_segment: Sets the host field based on a segment of the file path. Why not the others? • A: source_length is not a valid setting for file and directory monitor inputs. • C: directory is not a valid setting; instead, you use [monitor://<path>] to specify directories or files. • D: _UDP_Routing is not valid for file and directory monitoring; it applies to UDP inputs. Thus, B includes all valid settings for file and directory monitoring in inputs.conf.