SPLK-1003 Exam QuestionsBrowse all questions from this exam

SPLK-1003 Exam - Question 15


The priority of layered Splunk configuration files depends on the file's:

Show Answer
Correct Answer: C

The priority of layered Splunk configuration files depends on the file's context. This context refers to whether the configuration is applied globally or within a specific app or user context. Configuration files with a global context typically take precedence over those in app/user contexts, ensuring the most relevant settings are applied appropriately.

Discussion

3 comments
Sign in to comment
DeltaPotato
Feb 25, 2024

C. Page 43, Data Admin pdf (page number as of August 2021 class). "In case of conflicts, priority is based on context: - Global context (index time) - App/User context (search-time)"

ucsdmiami2020
Apr 2, 2024

Agreed C. Per the Splunk Reference URL https://docs.splunk.com/Documentation/Splunk/8.2.2/Admin/Wheretofindtheconfigurationfiles "To determine the order of directories for evaludating configuration file precendence, Splunk software considers each file's context. Configuration files operate in either a global context or in the context of the current app and user"

RedYeti
Sep 24, 2024

Answer C Data Admin course, page 43 and 257

ApisOption: C
Jun 30, 2024

C is correct