Splunk Enterprise Certified Admin Practice Test

What are the two types of scripted inputs in Splunk?

1. UDP and TCP

2. Batched and Streaming

3. Streaming and writing to a file

4. Scheduled and Manual

The correct answer is: Streaming and writing to a file

In Splunk, the two types of scripted inputs refer to the ways in which Splunk can acquire data from external sources through scripts. The correct choice, which highlights streaming and writing to a file, helps to clarify these input methods. Streaming inputs involve scripts that continuously output data without stopping, allowing for real-time data ingestion. These scripts keep the connection open and transmit data to Splunk as it becomes available. This is particularly useful for monitoring data sources that send information in a continuous stream, such as logs generated by servers or applications. On the other hand, writing to a file is a method where the script runs and gathers data before saving it into a specified file. This file can then be monitored by Splunk to ingest data on a more scheduled or event-driven basis. It allows for flexibility in capturing batch data that doesn't need immediate processing. By understanding these two methods - streaming for real-time data and writing to a file for scheduled or batched data input - one can effectively configure Splunk to collect data according to specific use cases and requirements.