A [script://] input sends data to a Splunk forwarder using which method?
A [script://] input sends data to a Splunk forwarder using which method?
A [script://] input in Splunk sends data using the STDOUT/STDERR method. This means that the script's output is sent to the standard output (STDOUT) or standard error (STDERR) streams and is then ingested by the Splunk forwarder for processing.
Looks like D is correct since the script input passes results/output to STDOUT for ingestion to splunk https://docs.splunk.com/Documentation/Splunk/latest/AdvancedDev/ScriptWriting
D looks correct
The correct one is D.
D, script outputs on that format
C is correct script write to a Temp File as most scripted inputs write to a file that then is indexed a script would go to STDOUT/STDERR only if it was a HEC like connection or Splunk RESTful input
D is the correct
D is the correct one. Page 97 of Splunk Core Implementation
Splunk runs the script [script://] stanza and ingest the outpu (STDOUT/STDERR)