Exam SPLK-1005 Topic 2 Question 99 Discussion

Actual exam question for Splunk's SPLK-1005 exam
Question #: 99
Topic #: 2
Which of the following files is used for both search-time and index-time configuration?

Suggested Answer: B Vote an answer

The props.conf file is a crucial configuration file in Splunk that is used for both search-time and index-time configurations.
* Atindex-time, props.conf is used to define how data should be parsed and indexed, such as timestamp recognition, line breaking, and data transformations.
* Atsearch-time, props.conf is used to configure how data should be searched and interpreted, such as field extractions, lookups, and sourcetypes.
* B. props.confis the correct answer because it is the only file listed that serves both index-time and search-time purposes.
Splunk Documentation References:
* props.conf - configuration for search-time and index-time

by Eudora at Jul 17, 2026, 08:08 AM

Limited Time Offer

15%

Off

Get Premium SPLK-1005 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10