Objective 15.2

Enterprise Certified Admin

Configure input phase options, such as sourcetype fine-tuning and character set encoding

Objective 15.2 sits in Fine Tuning Inputs, which carries 5% of the Enterprise Certified Admin exam. The questions below are original, written from the official objective title above, and each explanation cites the Splunk page it rests on.

Objective title verbatim from the official objectives. Splunk exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

15-2Fine Tuning Inputs

An administrator has data in an unexpected character set. Which indexing task does Splunk name for that?

Timestamp recognitionTimestamp recognition assigns the time of an event.
Event line breakingLine breaking decides where one event ends and the next begins.
Character set encodingCorrect · your answerCorrect.
Field extractionField extraction pulls named values out of the text.

Correct.

Checked against help.splunk.com, August 2026

Concept

Text read in the wrong encoding is corrupted before any other rule sees it, so this setting comes first. Getting it wrong makes every later extraction look broken.

Why C

Splunk lists configuring character set encoding among the tasks it performs when it indexes events, alongside configuring line breaking and identifying timestamps.

Source

When Splunk software indexes events, it does the following tasks: Task Link Configures character set encoding Configure character set encoding…

Splunk Docs: Overview of event processing, checked August 2026
#inputs#encoding

Now you: objective 15.2 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 2

15-2Fine Tuning Inputs

You need certain events to pick up a different host value at index time, depending on what each event contains. Which indexing task assigns metadata conditionally?

Sample question 2 of 2

15-2Fine Tuning Inputs

Social security numbers appear in a new feed and must never reach the index in readable form. Which indexing task can take those values out?

Full Enterprise Certified Admin question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Fine Tuning Inputs