Splunk Core Certified Advanced Power User — Question 54

Which configuration files are used to transform raw data ingested by Splunk? (Choose all that apply.)

Answer options

• A. props.conf
• B. inputs.conf
• C. rawdata.conf
• D. transforms.conf

Correct answer: A

Explanation

The correct answer is A, as props.conf is specifically used to define how Splunk processes and transforms incoming data. The other options, inputs.conf is for data input settings, rawdata.conf is not a standard Splunk configuration file, and transforms.conf is for defining transformations but does not process raw data directly.