Portal for Splunk apps can be accessed through www.splunkbase.com

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Will the queries following below get the same result?
1. index=log sourcetype=error_log status !=100
2. index=log sourcetype=error_log NOT status =100

• A.No
• B.Yes

Comment: *

Name: *

Email: *

Verification: *

What does the following specified time range do?
earliest=-72h@h latest=@d

• A.Look back 72 hours, up to the end of today
• B.Look back 72 hours up to one day ago
• C.Look back from 3 days ago up to the beginning of today
• D.Look back 3 days ago and prior

Comment: *

Name: *

Email: *

Verification: *

Which statement describes field discovery at search time?

• A.Splunk automatically discovers only fields directly related to the search results
• B.Splunk automatically discovers only manually configured fields
• C.Splunk automatically discovers only numeric fields
• D.Splunk automatically discovers only alphanumeric fields

Comment: *

Name: *

Email: *

Verification: *

Which search matches the events containing the terms "error" and "fail"?

• A.index=security Error Fail
• B.index=security error OR fail
• C.index=security "error failure"
• D.index=security NOT error NOT fail

Comment: *

Name: *

Email: *

Verification: *