Câu 19: SPLK-1003: Splunk Enterprise Certified Admin

This file has been manually created on a universal forwarder:/opt/splunkforwarder/etc/apps/my_TA/local/inputs.conf[monitor:///var/log/messages]sourcetype=syslogindex=syslogA new Splunk admin comes in and connects the universal forwarders to a deployment server and deploys the same app with a new inputs.conf file:/opt/splunk/etc/deployment-apps/my_TA/local/inputs.conf[monitor:///var/log/maillog]sourcetype=maillogindex=syslogWhich file is now monitored?

1. A. /var/log/messages
2. B. /var/log/maillog — đáp án hiện tại
3. C. /var/log/maillog and /var/log/messages
4. D. none of the above