Exam SPLK-1003 All QuestionsBrowse all questions from this exam
Question 105

What is the default value of LINE_BREAKER?

    Correct Answer: B

    The default value of LINE_BREAKER is represented by the regular expression ([\r\n]+), which captures any sequence of newlines and carriage returns. This ensures that the data is split into separate lines correctly.

Discussion
furiousjaseOption: B

Confirmed - B - "Default is any sequence of new lines and carriage returns: ([\r\n]+)"

ucsdmiami2020

Agreed B. Quoting the Splunk Reference URL, https://docs.splunk.com/Documentation/SplunkCloud/8.2.2105/Data/Configureeventlinebreaking "How the Splunk platform determines event boundaries. The Splunk platform determines event boundaries in two phases: 1. Line breaking, which use the LINE_BREAKER setting to split the incoming stream of data into separate lines. By default, the LINE_BREAKER value is any sequence of newlines and carriage returns. In regular expression format, this is represented as the following string: ([\r\n]+)"

kiranharOption: B

Answer is B