Splunk Enterprise Certified Admin Practice Test

What do Scripted Inputs do?

1. Schedule execution and indexes the output

2. Only run batch scripts on the server

3. Extract desired fields from logs

4. Monitor system health only

The correct answer is: Schedule execution and indexes the output

Scripted Inputs are a feature in Splunk that allow you to run external scripts and capture their output as input data for indexing. When using Scripted Inputs, you can schedule the execution of these scripts, which means they run at defined intervals, and the results generated by these scripts get indexed into Splunk. This functionality is useful for gathering data that is not readily available through standard logging sources, enabling administrators to incorporate additional data sources for monitoring, reporting, and alerting purposes. The other options describe specific functionalities that do not encompass the full capability of Scripted Inputs. Running batch scripts on the server is part of what Scripted Inputs can do, but it does not cover the aspect of scheduling execution and indexing the output, which is the primary function. Extracting desired fields is a task associated with data processing in Splunk but is not the defining characteristic of Scripted Inputs, which focus on capturing script outputs. Monitoring system health is not exclusive to Scripted Inputs, as there are various methods and data sources within Splunk for system health checks that do not rely on scripted inputs.