Which is a valid stanza for a network input?
Which is a valid stanza for a network input?
A valid stanza for a network input would be properly configured to specify the protocol, host, and correct configuration options. For a TCP input, options for connection_host should be either 'dns', 'ip', or 'none', and it must follow the correct format. 'connection_host' with the value 'web' is not valid within Splunk's configuration parameters for TCP and UDP inputs. Therefore, the valid stanza for a network input in this case is '[tcp://172.16.10.1:10001] connection_host = dns sourcetype = dns'.
D. connection_host attributes: dns (TCP), ip (UDP), none (UI)
Confirmation in inputs.conf under TCP: connection_host = [ip|dns|none]. Thus, web does not exist as an option and must be answer D.
C. PORT 9997 TCP Splunk port for communication between the forwarders and indexers
Answer: D https://docs.splunk.com/Documentation/Splunk/8.1.1/Data/Monitornetworkports
connection_host = web is not supported attribute value, instead connection_host=dns (answer D) is correct.
D is correct. Although in theory you could use 9997 when I tried to configure it Splunk said it was not available.
D - page 142 in Data Admin pdf for options/examples.
D is correct.... Option C is incorrect because web is not valid for connection_host, Data admin page 142
C is right! Port 9997 on TCP is in Splunk the standard port for communication between the forwarders and indexers Port 10001 is a non standard configuration
D is correct
D is the correct answer