SPLK-1003 · Question #7
The priority of layered Splunk configuration files depends on the file's:
The correct answer is C. Context. In Splunk's configuration layering system, the priority of a configuration file is determined by its context - meaning where the file resides in the directory hierarchy. The three contexts, from highest to lowest precedence, are: (1) User context (etc/users/<user>/), (2) App cont
Question
The priority of layered Splunk configuration files depends on the file's:
Options
- AOwner
- BWeight
- CContext
- DCreation time
How the community answered
(32 responses)- B6% (2)
- C91% (29)
- D3% (1)
Explanation
In Splunk's configuration layering system, the priority of a configuration file is determined by its context - meaning where the file resides in the directory hierarchy. The three contexts, from highest to lowest precedence, are: (1) User context (etc/users/<user>/), (2) App context (etc/apps/<app>/), and (3) System context (etc/system/). Within each context, local subdirectories take precedence over default subdirectories. Owner, weight, and creation time are not factors in determining configuration file priority.
Topics
Community Discussion
No community discussion yet for this question.