What Splunk command will allow an administrator to view the runtime configuration instructions for a monitored file in Inputs. cont on the forwarders?

What Splunk command will allow an administrator to view the runtime configuration instructions for a monitored file in Inputs. cont on the forwarders?
A . ./splunk _internal call /services/data/input.3/filemonitor
B . ./splunk show config  inputs.conf
C . ./splunk _internal rest /services/data/inputs/monitor
D . ./splunk show config inputs

View Answer

Answer: C

Explanation:

To view the runtime configuration instructions for a monitored file in inputs.conf on the forwarder, the correct command to use involves accessing the internal REST API that provides details on data inputs.

C. ./splunk _internal rest /services/data/inputs/monitor is the correct answer. This command uses Splunk’s internal REST endpoint to retrieve information about monitored files, including their runtime configurations as defined in inputs.conf.

Splunk Documentation

Reference: Splunk REST API – Data Inputs