Which of the following fields is stored with the events in the index?

• A.user
• B.source
• C.location
• D.sourceIp

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements about case sensitivity is true?

• A.Field names ARE case sensitive; field values are NOT.
• B.Both field names and field values ARE NOT case sensitive.
• C.Field values ARE case sensitive; field names ARE NOT.
• D.Both field names and field values ARE case sensitive.

Comment: *

Name: *

Email: *

Verification: *

Which of the following searches would return events with failure in index netfw or warn or critical in index netops?

• A.(index=netfw failure) OR (index=netops (warn OR critical))
• B.(index=netfw failure) AND index=netops warn OR critical
• C.(index=netfw failure) AND (index=netops (warn OR critical))
• D.(index=netfw failure) OR index=netops OR (warn OR critical)

Comment: *

Name: *

Email: *

Verification: *

What is a primary function of a scheduled report?

• A.Triggering an alert in your Splunk instance when certain conditions are met
• B.Auto-detect changes in performance
• C.Regularly scheduled archiving to keep disk space use low
• D.Auto-generated PDF reports of overall data trends

Comment: *

Name: *

Email: *

Verification: *

At the time of searching the start time is 03:35:08.
Will it look back to 03:00:00 if we use -30m@h in searching?

• A.Yes
• B.No

Comment: *

Name: *

Email: *

Verification: *