Valid SPLK-1003 Dumps shared by ExamDiscuss.com for Helping Passing SPLK-1003 Exam! ExamDiscuss.com now offer the newest SPLK-1003 exam dumps, the ExamDiscuss.com SPLK-1003 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com SPLK-1003 dumps with Test Engine here:
A user recently installed an application to index NCINX access logs. After configuring the application, they realize that no data is being ingested. Which configuration file do they need to edit to ingest the access logs to ensure it remains unaffected after upgrade?
Correct Answer: A
This option corresponds to the file path "$SPLUNK_HOME/etc/apps/splunk_TA_nginx/local/inputs.conf". This is the configuration file that the user needs to edit to ingest the NGINX access logs to ensure it remains unaffected after upgrade. This is explained in the Splunk documentation, which states: The local directory is where you place your customized configuration files. The local directory is empty when you install Splunk Enterprise. You create it when you need to override or add to the default settings in a configuration file. The local directory is never overwritten during an upgrade.