Within props. conf, which stanzas are valid for data modification? (select all that apply)

Within props. conf, which stanzas are valid for data modification? (select all that apply)
A . Host
B . Server
C . Source
D . Sourcetype

View Answer

Answer: A,C,D

Explanation:

https://docs.splunk.com/Documentation/Splunk/8.0.4/Admin/Propsconf#props.conf.spec

https://docs.splunk.com/Documentation/Splunk/8.1.1/Admin/Propsconf

"* Reuse of the same field-extracting regular expression across multiple sources, source types, or hosts."

https://docs.splunk.com/Documentation/Splunk/8.0.4/Admin/Propsconf#props.conf.spec