Which search will return only events containing the word "error" and display the results as a table that includes the fields named action, src, and dest?

• A.error | tabular action, src, dest
• B.error | stats table action, src, dest
• C.error | table action, src, dest
• D.error | table column=action column=src column=dest

Comment: *

Name: *

Email: *

Verification: *

When viewing results of a search job from the Activity menu, which of the following is displayed?

• A.New events based on the current time range picker
• B.The same events from when the original search was executed
• C.New events in addition to the same events from the original search
• D.The same events based on the current time range picker

Comment: *

Name: *

Email: *

Verification: *

What is a quick, comprehensive way to learn what data is present in a Splunk deployment?

• A.Review Splunk reports
• B.Run ./splunk show
• C.Click Data Summary in Splunk Web
• D.Search index=* sourcetype=* host=*

Comment: *

Name: *

Email: *

Verification: *

After running a search, what effect does clicking and dragging across the timeline have?

• A.Expands the time range of the search.
• B.Filters current search results.
• C.Executes a new search.
• D.Moves to past or future events.

Comment: *

Name: *

Email: *

Verification: *

When a search returns __________, you can view the results as a list.

• A.a list of events
• B.transactions
• C.statistical values

Comment: *

Name: *

Email: *

Verification: *