Exam SPLK-1003 topic 1 question 16 discussion

Actual exam question from Splunk's SPLK-1003

Question #: 16
Topic #: 1

[All SPLK-1003 Questions]

When configuring monitor inputs with whitelists or blacklists, what is the supported method of filtering the lists?

A. Slash notation
B. Regular expression
C. Irregular expression
D. Wildcard-only expression

Show Suggested Answer

Suggested Answer: B 🗳️

by Asami at July 13, 2020, 11:51 a.m.

Comments

Submit Cancel

Asami

Highly Voted 2 years, 11 months ago

B. Regular expression

upvoted 9 times

...

erick165

Most Recent 6 months, 3 weeks ago

Correction: D wildcards is incorrect as it says wildcards only so Regular Expressions is correct.

upvoted 2 times

...

D. Wildcards: clientName is a logical or tag name that can be assigned to a deployment client in deploymentclient.conf. ipAddress is the IP address of the deployment client. Can use wildcards, such as 10.1.1.* DNSname is the DNS name of the deployment client. Can use wildcards, such as *.ops.yourcompany.com hostname is the host name of deployment client. Can use wildcards, such as *.splunk.com instanceId is the instanceId of the client. This is a GUID string, for example: ffe9fe01-a4fb-425e-9f63-56cc274d7f8b.

upvoted 1 times

...

RedYeti

1 year, 2 months ago

Selected Answer: B

B. Regular expression Data Admin course, page 123

upvoted 2 times

...

Apis

1 year, 5 months ago

Selected Answer: B

B is correct

upvoted 2 times

...

DeltaPotato

1 year, 9 months ago

B. Regular Expression - Page 123 - Data Admin PDF.

upvoted 3 times

...

newrose

2 years, 6 months ago

https://docs.splunk.com/Documentation/Splunk/latest/Data/Whitelistorblacklistspecificincomingdata#Include_or_exclude_specific_incoming_data is a better reference

upvoted 2 times

ucsdmiami2020

1 year, 8 months ago

Agreed B. Quoting the reference URL "When you define filter entries, you must use exact regular expression syntax."

upvoted 2 times

...