Splunk Core Certified Consultant — Question 8

What syntax is required in inputs.conf to ingest data from files or directories?

Answer options

• A. A monitor stanza, sourcetype, and index is required to ingest data.
• B. A monitor stanza, sourcetype, index, and host is required to ingest data.
• C. A monitor stanza and sourcetype is required to ingest data.
• D. Only the monitor stanza is required to ingest data.

Correct answer: D

Explanation

The correct answer is D, as only the monitor stanza is essential for data ingestion. Options A, B, and C include additional elements like sourcetype, index, and host, which are not mandatory for the basic ingestion process.