Splunk Enterprise Certified Architect — Question 71

By default, what does metrics.log report?

Answer options

• A. Total results of source type parsing.
• B. Inspection information taken every 60 seconds.
• C. Top ten results of source type parsing.
• D. Inspection information taken every 30 seconds.

Correct answer: D

Explanation

The correct answer is D because metrics.log captures inspection details every 30 seconds by default. Options A and C are incorrect as they refer to results of source type parsing rather than inspection information. Option B is also wrong since it mentions a 60-second interval instead of the correct 30 seconds.