SPLK-3003 Practice Test

SPLK-3003 Practice Test practice questions, page 6 of 6, with answer review and explanations.

Question 26

Consider the scenario where the /var/log directory contains the files secure, messages, cron, audit. A customer has created the following inputs.conf stanzas in the same Splunk app in order to attempt to monitor the files secure and messages: Which file(s) will actually be actively monitored?

  1. /var/log/secure
  2. /var/log/messages
  3. /var/log/messages, /var/log/cron, /var/log/audit, /var/log/secure
  4. /var/log/secure, /var/log/messages