exam questions

Exam SPLK-1003 All Questions

View all questions & answers for the SPLK-1003 exam

Exam SPLK-1003 topic 1 question 106 discussion

Actual exam question from Splunk's SPLK-1003
Question #: 106
Topic #: 1
[All SPLK-1003 Questions]

Which of the following monitor inputs stanza headers would match all of the following files?
/var/log/www1/secure.log
/var/log/www/secure.l
/var/log/www/logs/secure.logs
/var/log/www2/secure.log

  • A. [monitor:///var/log/.../secure.*]
  • B. [monitor:///var/log/www1/secure.*]
  • C. [monitor:///var/log/www1/secure.log]
  • D. [monitor:///var/log/www*/secure.*]
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
furiousjase
Highly Voted 3 years, 4 months ago
Confirmed - A - "The ellipsis wildcard recursesthrough directories and subdirectories to match." "The asterisk wildcard matches anything in that specific directory path segment but does not go beyond that segment in the path. Normally it should be used at the end of a path."
upvoted 10 times
ucsdmiami2020
3 years, 3 months ago
Per Splunk docs reference URL https://docs.splunk.com/Documentation/Splunk/8.2.1/Data/Specifyinputpathswithwildcards Wildcard Description Regex equivalent Examples ... The ellipsis wildcard searches recursively through directories and any number of levels of subdirectories to find matches. If you specify a folder separator (for example, //var/log/.../file), it does not match the first folder level, only subfolders. .* /foo/.../bar.log matches /foo/1/bar.log, /foo/2/bar.log, /foo/1/2/bar.log, and so on. It does not match /foo/bar.log or /foo/3/notbar.log. Because a single ellipse searches recursively through all folders and subfolders, /foo/.../bar.log matches /foo/.../.../bar.log.
upvoted 1 times
...
...
yybbb
Most Recent 11 months, 2 weeks ago
Selected Answer: A
The third file has one more layer of subdir so "..." is needed. Therefore A is the only answer.
upvoted 1 times
...
HNaka
11 months, 3 weeks ago
Answer is A!!!!!!
upvoted 2 times
...
solomone
1 year, 7 months ago
Selected Answer: A
There are two different WWW folders. You need ... (three dots variable) to traverse all of them.
upvoted 1 times
...
pro12345
2 years, 3 months ago
Selected Answer: A
Confirmed - A
upvoted 1 times
...
fabtastic
2 years, 7 months ago
Selected Answer: A
Answer is A
upvoted 1 times
...
kiranhar
3 years, 4 months ago
answer is A
upvoted 1 times
...
kiranhar
3 years, 4 months ago
Answer is A
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...