SplunkSplunk
SPLK-1003 · Question #152
SPLK-1003 Question #152: Real Exam Question with Answer & Explanation
The correct answer is A: [host: : server. splunk. com]. To manually specify a character set for an input, you need to set the CHARSET key in the props.conf file. You can specify the character set by host, source, or sourcetype, but not by index.
Configuration Files
Question
What is an example of a proper configuration for CHARSET within props.conf?
Options
- A[host: : server. splunk. com]
- B[index: :main]
- C[sourcetype: : son]
- D[source: : /var/log/ splunk]
Explanation
To manually specify a character set for an input, you need to set the CHARSET key in the props.conf file. You can specify the character set by host, source, or sourcetype, but not by index.
Topics
#props.conf#CHARSET#Configuration Syntax#Stanzas
Community Discussion
No community discussion yet for this question.