thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Advanced

inputs.conf

A Splunk configuration file that defines what data a Splunk instance collects and how it is labeled.

Definition

inputs.conf stanzas specify monitor paths, Windows event logs, network ports and scripted inputs, along with index, sourcetype and host settings. On forwarders it is typically deployed via apps from a deployment server.

Example

[monitor:///var/log/secure] index = os sourcetype = linux_secure

Exam tip

inputs.conf = what to collect; outputs.conf = where to send it.

Related terms