SPLK-2002: Splunk Enterprise Certified ArchitectDemo

Question

Splunk configuration parameter values may vary across multiple .conf files with the same name located in different apps. Which directory has the highest precedence?

A System local directory.
B System default directory.
C App local directories, in ASCII order.
D App default directories, in ASCII order.

Explanation

For configuration files evaluated in the global context, Splunk gives $SPLUNK_HOME/etc/system/local the highest priority. Conflicting settings there override values from app-local, app-default, and system-default copies of the same .conf file.

Learn more

Splunk Enterprise: Configuration file precedence

SPLK-2002: Splunk Enterprise Certified ArchitectDemo

AstroTutor

Notes

Readiness

QuestionQ50

Community Discussion