Objective 13.3
Enterprise Certified AdminCreate a basic scripted input
Objective 13.3 sits in Network and Scripted Inputs, which carries 5% of the Enterprise Certified Admin exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.
Objective title verbatim from the official objectives. Splunk exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
An administrator needs data from an API that no input can read directly. Which input does Splunk name?
Correct.
Checked against help.splunk.com, August 2026Concept
Where no protocol fits, running a program that fetches the data turns anything into a source. The cost is that somebody now owns that script and its failure modes.
Why A
Splunk states that the platform, through a universal or heavy forwarder, can accept events from scripts that you provide, and that you can use scripted input to get data from APIs, other remote data interfaces, and message queues.
Source
Splunk Docs: Get data from APIs through scripted inputs, checked August 2026The Splunk platform, through a universal or heavy forwarder, can accept events from scripts that you provide.
Now you: objective 13.3 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 2
An administrator asks where a scripted input's error output goes. What does Splunk say?
Sample question 2 of 2
An administrator asks what environment a launched script inherits. What does Splunk say to watch?
Full Enterprise Certified Admin question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.