Which of the following files is used for both search-time and index-time configuration?
What Splunk command will allow an administrator to view the runtime configuration instructions for a monitored file in inputs.conf on the forwarders?
When should Splunk Cloud Support be contacted?
Where does the regex-replacement processor run?
What is the correct syntax to monitor /apache/foo/logs, /apache/bar/logs, and /apache/bar/1/logs?
When monitoring directories that contain mixed file types, which setting should be omitted from inputs.conf and instead be overridden in props.conf?