What is the valid option for a [monitor] stanza in inputs.conf?

The correct answer is D. ignoreOlderThan. ignoreOlderThan is a valid and commonly used setting in a [monitor] stanza. It tells Splunk to skip (not index) files that have not been modified within a specified time window (e.g., ignoreOlderThan = 7d), preventing unnecessary re-ingestion of stale files. 'enabled' is not a va

Configuration Files

Question

Options

Aenabled
Bdatasource
Cserver_name
DignoreOlderThan

How the community answered

(40 responses)

A
3% (1)
B
8% (3)
C
3% (1)
D
88% (35)

Explanation

ignoreOlderThan is a valid and commonly used setting in a [monitor] stanza. It tells Splunk to skip (not index) files that have not been modified within a specified time window (e.g., ignoreOlderThan = 7d), preventing unnecessary re-ingestion of stale files. 'enabled' is not a valid parameter for monitor stanzas in inputs.conf. 'datasource' and 'server_name' are not recognized monitor stanza parameters.

Topics

#inputs.conf#monitor stanza#data input configuration#configuration options

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice