Which of the following statements apply to directory inputs? {select all that apply)

Question

Options

• AAll discovered text files are consumed.
• BCompressed files are ignored by default
• CSplunk recursively traverses through the directory structure.
• DWhen adding new log files to a monitored directory, the forwarder must be restarted to take them

• A
  89% (16)
• B
  6% (1)
• D
  6% (1)

Explanation

When Splunk monitors a directory, it recursively traverses all subdirectories (C is true) and consumes all discovered text-based files (A is true). Regarding B: while compressed files are not indexed by default without additional configuration, this option was not selected as a primary correct behavior of directory inputs in this context. D is false - Splunk dynamically detects new files added to a monitored directory without requiring a forwarder restart; it uses a continuous monitoring loop to identify new data. This makes Splunk's directory monitoring flexible for growing log directories.

No community discussion yet for this question.