nerdexam
Splunk

SPLK-1003 · Question #5

You update a props. conf file while Splunk is running. You do not restart Splunk and you run this command: splunk btoo1 props list --debug. What will the output be?

The correct answer is C. A list of props. conf configurations as they are on-disk along with a file path from which the. https://docs.splunk.com/Documentation/Splunk/8.0.1/Troubleshooting/Usebtooltotroubleshootcon "The btool command simulates the merging process using the on-disk conf files and creates a report showing the merged settings." "The report does not necessarily represent what's loaded…

Configuration Files

Question

You update a props. conf file while Splunk is running. You do not restart Splunk and you run this command: splunk btoo1 props list --debug. What will the output be?

Options

  • Alist of all the configurations on-disk that Splunk contains.
  • BA verbose list of all configurations as they were when splunkd started.
  • CA list of props. conf configurations as they are on-disk along with a file path from which the
  • DA list of the current running props, conf configurations along with a file path from which the

How the community answered

(35 responses)
  • A
    9% (3)
  • B
    3% (1)
  • C
    74% (26)
  • D
    14% (5)

Explanation

https://docs.splunk.com/Documentation/Splunk/8.0.1/Troubleshooting/Usebtooltotroubleshootcon "The btool command simulates the merging process using the on-disk conf files and creates a report showing the merged settings." "The report does not necessarily represent what's loaded in memory. If a conf file change is made that requires a service restart, the btool report shows the change even though that change isn't

Topics

#btool utility#Configuration files#Configuration loading#Troubleshooting

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice