Which of the following is correct in regard to configuring a Universal Forwarder as an Intermediate Forwarder?
What does the followTail attribute do in inputs.conf?
In case of a Change Request, which of the following should submit a support case for Splunk Support?
A monitor has been created in inputs.conf for a directory that contains a mix of file types.How would a Cloud Admin fine-tune assigned sourcetypes for different files in the directory during the input phase?
Windows input types are collected in Splunk via a script which is configurable using the GUI. What is this type of input called?
When monitoring directories that contain mixed file types, which setting should be omitted from inputs.conf and instead be overridden in props.conf?
