When an alert action is configured to run a script, Splunk must be able to locate the script. Which is one of the directories Splunk will look in to find the script?
What is the correct way to use a time range specifier in the search bar so that the search looks back 2 hours?
When looking at a statistics table, what is one way to drill down to see the underlying events?
When saving a search directly to a dashboard panel instead of saving as a report first, which of the following is created?
At index time, in which field does Splunk store the timestamp value?
