Splunk Core Certified Advanced Power User — Question 7

Which of the following statements apply to directory inputs? (Choose all that apply.)

Answer options

• A. All discovered text files are consumed.
• B. Compressed files are ignored by default.
• C. Splunk recursively traverses through the directory structure.
• D. When adding new log files to a monitored directory, the forwarder must be restarted to take them into account.

Correct answer: A

Explanation

Option A is correct because all discovered text files are indeed consumed by Splunk. Option B is incorrect as compressed files are not ignored by default; they can be indexed if configured properly. Option C is true, but not the best answer for this question, as it doesn't directly relate to the consumption of files. Option D is false because new log files can be picked up without needing to restart the forwarder.