SPLK-1003 · Question #82
Which option on the Add Data menu is most useful for testing data ingestion without creating inputs.conf?
The correct answer is A. Upload option. The Upload option in the Add Data menu ingests a file as a one-time operation without creating a persistent inputs.conf entry, making it ideal for testing.
Question
Which option on the Add Data menu is most useful for testing data ingestion without creating inputs.conf?
Options
- AUpload option
- BForward option
- CMonitor option
- DDownload option
How the community answered
(35 responses)- A89% (31)
- B3% (1)
- C3% (1)
- D6% (2)
Why each option
The Upload option in the Add Data menu ingests a file as a one-time operation without creating a persistent inputs.conf entry, making it ideal for testing.
The Upload option allows an administrator to select a local file and ingest it through the UI as a one-time event; it does not write any configuration to inputs.conf, so it is the standard method for testing source type configurations, event breaking, and field extractions without affecting production input settings.
The Forward option is used to configure data collection from forwarders and involves persistent connection and input configuration.
The Monitor option creates a persistent file or directory monitor input and writes the corresponding stanza to inputs.conf on the Splunk instance.
A Download option does not exist in the Splunk Add Data menu interface.
Concept tested: One-time file upload for testing data ingestion
Source: https://docs.splunk.com/Documentation/Splunk/latest/Data/Uploadafileasadata
Topics
Community Discussion
No community discussion yet for this question.