Which is a valid stanza for a network input?

Which is a valid stanza for a network input?
A . [udp://172.16.10.1:9997] connection = dns sourcetype = dns
B . [any://172.16.10.1:10001] connection_host = ip sourcetype = web
C . [tcp://172.16.10.1:9997] connection_host = web sourcetype = web
D . [tcp://172.16.10.1:10001] connection_host = dns sourcetype = dns

Answer: D

Explanation:

https://docs.splunk.com/Documentation/Splunk/8.1.1/Data/Monitornetworkports

Reference: https://docs.splunk.com/Documentation/SplunkCloud/8.0.2006/Data/Bypassautomaticsourcetypeassignment

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments