The PS preferred method for data onboarding is to use the inputs.conf file. The inputs.conf file is a configuration file that defines how Splunk Enterprise monitors files and directories, network ports, scripts, Windows event logs, and other data sources. The inputs.conf file allows for more flexibility, control, and automation than the other methods. The inputs.conf file also supports the use of base configurations, which are a set of configuration files that provide consistent, repeatable, and supportable configurations for Splunk deployments. Therefore, the correct answer is C. Use the inputs.conf file. References:
Splunk Core Certified Consultant Test Blueprint
Splunk Documentation: About inputs.conf
Splunk Documentation: About base configurations
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit