SPLK-1003 · Question #64
Which of the following configuration files are used with a universal forwarder? (Choose all that apply.)
The correct answer is A. inputs.conf C. outputs.conf. Universal forwarders use inputs.conf to define what data to collect (e.g., monitored files, network ports, scripts) and outputs.conf to define where to send that collected data (i.e., the receiving indexers). 'monitor.conf' and 'forwarder.conf' do not exist as valid Splunk…
Question
Which of the following configuration files are used with a universal forwarder? (Choose all that apply.)
Options
- Ainputs.conf
- Bmonitor.conf
- Coutputs.conf
- Dforwarder.conf
How the community answered
(18 responses)- A89% (16)
- B6% (1)
- D6% (1)
Explanation
Universal forwarders use inputs.conf to define what data to collect (e.g., monitored files, network ports, scripts) and outputs.conf to define where to send that collected data (i.e., the receiving indexers). 'monitor.conf' and 'forwarder.conf' do not exist as valid Splunk configuration files. Universal forwarders have a reduced configuration footprint compared to heavy forwarders and cannot perform parsing tasks like props.conf or transforms.conf.
Topics
Community Discussion
No community discussion yet for this question.