Consider the following stanza in inputs.conf:
What will the value of the source filed be for events generated by this scripts input?
Exam SPLK-1003 All QuestionsBrowse all questions from this exam
Question 117
Correct Answer: A
The value of the source field will be the full path of the script, which is /opt/splunk/etc/apps/search/bin/lister.sh. By default, the source for a scripts input is set to the full path of the script file unless overridden.
Discussion
loky0Option: A
A. it defaults to script name, sourcetype also does the same
ucsdmiami2020
Per Splunk docs reference https://docs.splunk.com/Documentation/Splunk/8.2.2/Admin/Inputsconf -Scroll down to source = <string> *Default: the input file path
FloydaOption: A
script name
imggnzOption: A
A, /opt/splunk/etc/....