SPLK-1003 Exam QuestionsBrowse all questions from this exam

SPLK-1003 Exam - Question 13


You update a props.conf file while Splunk is running. You do not restart Splunk and you run this command: splunk btool props list `"-debug. What will the output be?

Show Answer
Correct Answer: CD

The btool command in Splunk is used to troubleshoot configuration files by simulating the merging process of the on-disk configuration files, and it generates a report showing the merged settings. The --debug flag is used to display the exact file path from which the configuration is located. Therefore, running the splunk btool props list --debug command will result in a list of props.conf configurations as they are on-disk along with the file paths from which the configurations are located.

Discussion

11 comments
Sign in to comment
giubalOption: C
Apr 24, 2020

should be C https://docs.splunk.com/Documentation/Splunk/8.0.1/Troubleshooting/Usebtooltotroubleshootconfigurations

dpharkerOption: C
Sep 28, 2020

Answer is C. See this phrase in the docs -> "The btool command simulates the merging process using the on-disk conf files and creates a report showing the merged settings." https://docs.splunk.com/Documentation/Splunk/latest/Troubleshooting/Usebtooltotroubleshootconfigurations

newrose
Nov 30, 2020

Yes, and right after it says "The report does not necessarily represent what's loaded in memory. If a conf file change is made that requires a service restart, the btool report shows the change even though that change isn't active."

RedYetiOption: C
Mar 24, 2022

Answer is C.

Ashton_98Option: D
Nov 15, 2020

btool will only show what is running / in memory, not what's on disk. D is correct.

Ashton_98
Nov 15, 2020

That's wrong actually, it's dependent on the conf and giubal and dphacker are correct.

ApisOption: C
Dec 30, 2021

C is correct

malice4Option: C
May 14, 2021

Correct answer is C because debug displays the exact .conf file location

erick165Option: C
Nov 26, 2022

C is the correct answer The report does not necessarily represent what's loaded in memory. If a conf file change is made that requires a service restart, the btool report shows the change even though that change isn't active.

tony123Option: C
Jan 29, 2021

C splunk btool props list -- shows on-disk configuration for requested Use --debug to display the exact .conf file location

JackallOption: B
Feb 23, 2021

btool key words: btool for on-disk ,and --debug for file location

ArDeKuOption: C
Mar 30, 2021

It should be C as btool is used for ondisk and debug is used for file path..

bobixakaOption: C
Nov 2, 2023

it troubleshoots config on disk not in memory. Answer: C