Splunk Core Certified Advanced Power User — Question 37

What is the difference between the two wildcards ... and * for the monitor stanza in inputs.conf?

Answer options

• A. ... is not supported in monitor stanzas.
• B. There is no difference, they are interchangeable and match anything beyond directory boundaries.
• C. * matches anything in that specific directory path segment, whereas ... recurses through subdirectories as well.
• D. ... matches anything in that specific directory path segment, whereas * recurses through subdirectories as well.

Correct answer: C

Explanation

The correct answer is C because the wildcard * applies only to the current directory level, while ... allows for matching items recursively in subdirectories. A is incorrect since ... is indeed supported in monitor stanzas, and B is wrong because the two wildcards have distinct functionalities. D misrepresents the roles of the wildcards by switching their meanings.