SPLK-1001 Practice Question: Drag and drop the steps to add a new data input…

Drag and drop the steps to add a new data input using Splunk Web (e.g., monitor a log file) into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Select data input type, then specify source, then configure metadata

Adding a data input involves selecting the type, specifying the source, and configuring metadata.

Answer analysis

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Select data input type, then specify source, then configure metadata
Why this is correct
This is the correct order because in Splunk Web, when adding a new data input, you first choose the type (e.g., monitor), then define the source (file path), and finally set metadata like sourcetype and index. This sequential flow matches the Splunk interface.
✗
Specify source, then configure metadata, then select data input type
Why it's wrong here
This is incorrect because you cannot specify a source or metadata before selecting the data input type; the type determines available options for source and metadata.
✗
Select data input type, then configure metadata, then specify source
Why it's wrong here
This is incorrect because you must specify the source before configuring metadata; metadata settings like sourcetype and index depend on the source being defined.
✗
Configure metadata, then select data input type, then specify source
Why it's wrong here
This is incorrect because metadata cannot be configured before selecting the data input type and specifying the source; the context is missing.

Go deeper