Which of the following describes lookup files?

• A.Lookup fields cannot be used in searches.
• B.Lookups contain static data available in the index.
• C.Lookups add more fields to results returned by a search.
• D.Lookups pull data at index time and add them to search results.

Comment: *

Name: *

Email: *

Verification: *

Matching search terms are highlighted.

• A.No
• B.Yes

Comment: *

Name: *

Email: *

Verification: *

You can use the following options to specify start and end time for the query range:

• A.earliest=
• B.latest=
• C.Only 3rd and 4th
• D.All the above
• E.beginning=
• F.ending=

Comment: *

Name: *

Email: *

Verification: *

A field exists in search results, but isn't being displayed in the fields sidebar. How can it be added to the fields sidebar?

• A.This scenario isn't possible because all fields returned from a search always appear in the fields sidebar.
• B.Click Interesting Fields and select the field to add it to Selected Fields.
• C.Click All Fields and select the field to add it to Selected Fields.
• D.Click Selected Fields and select the field to add it to Interesting Fields.

Comment: *

Name: *

Email: *

Verification: *

By default, how long does Splunk retain a search job?

• A.10 Minutes
• B.15 Minutes
• C.1 Day
• D.7 Days

Comment: *

Name: *

Email: *

Verification: *