SPLK-1003 · Question #80
How is a remote monitor input distributed to forwarders?
The correct answer is A. As an app.. Remote monitor inputs are packaged inside an app and distributed to forwarders using Splunk's deployment server app distribution mechanism.
Question
How is a remote monitor input distributed to forwarders?
Options
- AAs an app.
- BAs a forward.conf file.
- CAs a monitor.conf file.
- DAs a forwarder monitor profile.
How the community answered
(48 responses)- A96% (46)
- C2% (1)
- D2% (1)
Why each option
Remote monitor inputs are packaged inside an app and distributed to forwarders using Splunk's deployment server app distribution mechanism.
An inputs.conf file containing the monitor stanza is placed inside an app directory structure under $SPLUNK_HOME/etc/deployment-apps; the deployment server then pushes this app to targeted forwarder clients, which install it and begin monitoring the specified path.
forward.conf is not a valid Splunk configuration file; no such file exists in Splunk's configuration schema.
monitor.conf is not a valid Splunk configuration file; monitor inputs are defined within inputs.conf, not a separate monitor-specific file.
Forwarder monitor profile is not a Splunk concept or configuration object; no such mechanism exists in Splunk's architecture.
Concept tested: Distributing monitor inputs to forwarders via deployment apps
Source: https://docs.splunk.com/Documentation/Splunk/latest/Forwarding/Deployaforwarder
Topics
Community Discussion
No community discussion yet for this question.