nerdexam
Splunk

SPLK-2002(205Q) · Question #66

When troubleshooting monitor inputs, which command checks the status of the tailed files?

The correct answer is C. curl https://serverhost:8089/services/admin/inputstatus/TailingProcessor:FileStatus. The curl https://serverhost:8089/services/admin/inputstatus/TailingProcessor:FileStatus command is used to check the status of the tailed files when troubleshooting monitor inputs. Monitor inputs are inputs that monitor files or directories for new data and send the data to…

Troubleshooting Splunk Components

Question

When troubleshooting monitor inputs, which command checks the status of the tailed files?

Options

How the community answered

(44 responses)
  • B
    2% (1)
  • C
    93% (41)
  • D
    5% (2)

Explanation

The curl https://serverhost:8089/services/admin/inputstatus/TailingProcessor:FileStatus command is used to check the status of the tailed files when troubleshooting monitor inputs. Monitor inputs are inputs that monitor files or directories for new data and send the data to Splunk for indexing. The TailingProcessor:FileStatus endpoint returns information about the files that are being monitored by the Tailing Processor, such as the file name, path, size, position, and status. The splunk cmd btool inputs list | tail command is used to list the inputs configurations from the inputs.conf file and pipe the output to the tail command. The splunk cmd btool check inputs layer command is used to check the inputs configurations for syntax errors and layering. The curl https://serverhost:8089/services/admin/inputstatus/TailingProcessor:Tailstatus command does not exist, and it is not a valid endpoint.

Topics

#monitor inputs#tailing processor#file status#REST API

Community Discussion

No community discussion yet for this question.

Full SPLK-2002(205Q) Practice