Exam4Training

What is the valid option for a [monitor] stanza in inputs.conf?

What is the valid option for a [monitor] stanza in inputs.conf?
A . enabled
B . datasource
C . server_name
D . ignoreOlderThan

Answer: D

Explanation:

Reference: https://docs.splunk.com/Documentation/Splunk/8.0.5/Data/Monitorfilesanddirectorieswithinputs.conf

Exit mobile version