Clicking a SEGMENT on a chart, ________.

• A.adds the highlighted value to the search criteria
• B.drills down for that value
• C.highlights the field value across the chart

Comment: *

Name: *

Email: *

Verification: *

According to Splunk best practices, which placement of the wildcard results in the most efficient search?

• A.f*il
• B.fail*
• C.*fail*
• D.*fail

Comment: *

Name: *

Email: *

Verification: *

Documentations for Splunk can be found at docs.splunk.com

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Search Assistant is enabled by default in the SPL editor with compact settings.

• A.No
• B.Yes

Comment: *

Name: *

Email: *

Verification: *

Which search matches the events containing the terms "error" and "fail"?

• A.index=security Error Fail
• B.index=security error OR fail
• C.index=security "error failure"
• D.index=security NOT error NOT fail

Comment: *

Name: *

Email: *

Verification: *