When writing searches in Splunk, which of the following is true about Booleans?

• A.They must be uppercase.
• B.They must be lowercase.
• C.They must be in quotations.
• D.They must be in parentheses.

Comment: *

Name: *

Email: *

Verification: *

Which of the following reports is available in the Fields window?

• A.Events with top value fields
• B.Events with rare value fields
• C.Top values by time
• D.Rare values by time

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements are correct about Search & Reporting App? (Choose three.)

• A.Can be accessed by Apps > Search & Reporting.
• B.Provides default interface for searching and analyzing logs.
• C.It only gives us search functionality.
• D.Enables the user to create knowledge object, reports, alerts and dashboards.

Comment: *

Name: *

Email: *

Verification: *

In the fields sidebar, what indicates that a field is numeric?

• A.A number to the right of the field name.
• B.A # symbol to the left of the field name.
• C.A lowercase nto the left of the field name.
• D.A lowercase nto the right of the field name.

Comment: *

Name: *

Email: *

Verification: *

What are the three main Splunk components?

• A.Search head, indexer, forwarder
• B.Search head, GPU, streamer
• C.Search head, SSD, heavy weight agent
• D.Search head, SQL database, forwarder

Comment: *

Name: *

Email: *

Verification: *