Splunk Core Certified Advanced Power User — Question 21

Which parent directory contains the configuration files in Splunk?

Answer options

• A. $SPLUNK_HOME/etc
• B. $SPLUNK_HOME/var
• C. $SPLUNK_HOME/conf
• D. $SPLUNK_HOME/default

Correct answer: A

Explanation

$SPLUNK_HOME/etc is the correct location for configuration files in Splunk, as it is specifically designated for configuration settings. The other options, such as $SPLUNK_HOME/var, are used for logs and other runtime data, while $SPLUNK_HOME/conf and $SPLUNK_HOME/default are not standard directories for configuration files.