Splunk Enterprise Security Certified Analyst — Question 21

A [script://] input sends data to a Splunk forwarder using which method?

Answer options

• A. UDP stream
• B. TCP stream
• C. Temporary file
• D. STDOUT/STDERR

Correct answer: D

Explanation

The correct answer is D, as a [script://] input sends data to the Splunk forwarder through the standard output and error streams. Options A and B, UDP and TCP streams, are methods used for data transmission but are not applicable for [script://]. Option C, Temporary file, is also not relevant for how [script://] inputs transmit data.