Which parent directory contains the configuration files in Splunk?

The correct answer is A. SSFLUNK_HOME/etc. All Splunk configuration files reside under the $SPLUNK_HOME/etc directory. This includes subdirectories like $SPLUNK_HOME/etc/system/default (factory defaults), $SPLUNK_HOME/etc/system/local (system-level customizations), and $SPLUNK_HOME/etc/apps (app-specific configs). The…

Configuration Files

Question

Exhibit

Options

ASSFLUNK_HOME/etc
BSSPLUNK_HOME/var
CSSPLUNK_HOME/conf
DSSPLUNK_HOME/default

How the community answered

(19 responses)

A
95% (18)
C
5% (1)

Explanation

All Splunk configuration files reside under the $SPLUNK_HOME/etc directory. This includes subdirectories like $SPLUNK_HOME/etc/system/default (factory defaults), $SPLUNK_HOME/etc/system/local (system-level customizations), and $SPLUNK_HOME/etc/apps (app-specific configs). The /var directory holds index data and logs; /conf and /default are not top-level Splunk directories used for configuration storage.

Topics

#Splunk directory structure#Configuration files location#SPLUNK_HOME#etc directory

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice