Splunk Core Certified User — Question 28

When an alert action is configured to run a script, Splunk must be able to locate the script.
Which is one of the directories Splunk will look in to find the script?

Answer options

• A. $SPLUNK_HOME/bin/scripts
• B. $SPLUNK_HOME/etc/scripts
• C. $SPLUNK_HOME/bin/etc/scripts
• D. $SPLUNK_HOME/etc/scripts/bin

Correct answer: A

Explanation

The correct answer is A, as Splunk looks in the $SPLUNK_HOME/bin/scripts directory for executable scripts when an alert action is triggered. Options B, C, and D do not point to the correct directory where Splunk expects to find scripts for alert actions.