Splunk Core Certified Advanced Power User — Question 120

When using a directory monitor input, specific source type can be selectively overridden using which configuration file?

Answer options

• A. props.conf
• B. sourcetypes.conf
• C. transforms.conf
• D. outputs.conf

Correct answer: A

Explanation

The correct answer is A (props.conf) because this file is used to define properties for data inputs, including the ability to override source types. The other options serve different purposes: B (sourcetypes.conf) is for defining sourcetypes, C (transforms.conf) is used for data transformation, and D (outputs.conf) is for configuring data outputs.