Splunk Enterprise Certified Admin Practice Test

The file that must be edited to set various input options for data in Splunk is inputs.conf. This configuration file is specifically designed to define data input configurations such as where to collect the data from (e.g., files, directories, network ports), how to monitor those sources, and settings about how data should be indexed upon arrival.

inputs.conf allows you to customize settings for each data source, including parameters like the source type, indexing options, and data processing settings. This makes it essential for administrators who need to manage and configure how data enters the Splunk environment.

While the other configuration files serve their purposes—outputs.conf for defining where to send the indexed data, props.conf for setting attributes that affect how data is processed at index time and search time, and index.conf for managing index properties—they are not used to configure incoming data inputs specifically. Thus, inputs.conf is the correct file to modify when you want to set up or change data input options in Splunk.