exam questions

Exam SPLK-1003 All Questions

View all questions & answers for the SPLK-1003 exam

Exam SPLK-1003 topic 1 question 117 discussion

Actual exam question from Splunk's SPLK-1003
Question #: 117
Topic #: 1
[All SPLK-1003 Questions]

Consider the following stanza in inputs.conf:

What will the value of the source filed be for events generated by this scripts input?

  • A. /opt/splunk/etc/apps/search/bin/lister.sh
  • B. unknown
  • C. lister
  • D. lister.sh
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
loky0
Highly Voted 1 year, 6 months ago
A. it defaults to script name, sourcetype also does the same
upvoted 7 times
ucsdmiami2020
1 year, 5 months ago
Per Splunk docs reference https://docs.splunk.com/Documentation/Splunk/8.2.2/Admin/Inputsconf -Scroll down to source = <string> *Default: the input file path
upvoted 3 times
...
...
NastyNutsu
Most Recent 1 month ago
Selected Answer: A
the source and sourcetype fields default to the script's name. In this case, the sourcetype is explicitly set to lister, and the question asks for the source. Thus, the value of the source field for events generated by this script input will remain as default, which is script name.
upvoted 1 times
...
Floyda
6 months, 3 weeks ago
Selected Answer: A
script name
upvoted 1 times
...
imggnz
10 months, 1 week ago
A, /opt/splunk/etc/....
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago