Splunk Core Certified Advanced Power User — Question 93

What is the valid option for a [monitor] stanza in inputs.conf?

Answer options

• A. enabled
• B. datasource
• C. server_name
• D. ignoreOlderThan

Correct answer: D

Explanation

The correct answer is D, 'ignoreOlderThan', which specifies a time limit for ignoring files that are older than a certain age. Options A, B, and C do not apply to the [monitor] stanza in inputs.conf; 'enabled' is a general setting, 'datasource' is not a recognized parameter, and 'server_name' is unrelated to file monitoring.