Splunk indexes the data on the basis of timestamps.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

In automatic lookup definitions, the _____ fields are those that are not in the event data.

• A.output
• B.input

Comment: *

Name: *

Email: *

Verification: *

What is a quick, comprehensive way to learn what data is present in a Splunk deployment?

• A.Click Data Summary in Splunk Web
• B.Search index=* sourcetype=* host=*
• C.Review Splunk reports
• D.Run ./splunk show

Comment: *

Name: *

Email: *

Verification: *

Which of the following file types is an option for exporting Splunk search results?

• A.XLS
• B.PDF
• C.RTF
• D.JSON

Comment: *

Name: *

Email: *

Verification: *

Which of the statements is correct regarding click and drag option in timeline?

• A.There is no functionality like click and drag in Splunk's timeline.
• B.Using this option executes a new query.
• C.The new result after selecting the range by dragging filters the events and displays the most recent first.
• D.This doesn't execute a new query

Comment: *

Name: *

Email: *

Verification: *