Data can be onboarded using apps, Splunk Web, or the CLI.
Which is the PS preferred method?
Data can be onboarded using apps, Splunk Web, or the CLI.
Which is the PS preferred method?
The preferred method for onboarding data by professional services (PS) is to use the inputs.conf file. This method provides precise control over the data inputs and is suitable for consistent and scalable configurations, especially in production environments. It allows for better management and configuration of data sources compared to using the Splunk Web's add data wizard, which is more suitable for small-scale or trial purposes.
PS recommends C
Should be C. PS recommends base configs apps
wrong the Data Wizard is for trialing small sets of data <500MB of log files The proper method is to use inputs.conf in combination with small single use Splunk apps for the data source.
Agree that it should be C.
C is the recommended way for Splunk PS
ALWAYS USE INPUTS! C
C looks fine