What are the two most efficient search filters?

• A._time and host
• B._time and index
• C.host and sourcetype
• D.index and sourcetype

Comment: *

Name: *

Email: *

Verification: *

When refining search results, what is the difference in the time picker between real-time and relative time ranges?

• A.Real-time searches happen instantly, while relative searches happen at a scheduled time.
• B.Real-time searches display results from a rolling time window, while relative searches display results from a set length of time.
• C.Real-time searches run constantly in the background, while relative searches only run when certain criteria are met.
• D.Real-time represents events that have happened in a set time window, while relative will display results from a rolling time window.

Comment: *

Name: *

Email: *

Verification: *

How can another user gain access to a saved report?

• A.The owner of the report can edit permissions from the Edit dropdown.
• B.Only users with an Admin or Power User role can access other users' reports.
• C.Anyone can access any reports marked as public within a shared Splunk deployment.
• D.The owner of the report must clone the original report and save it to their user account.

Comment: *

Name: *

Email: *

Verification: *

Which Boolean operator is always implied between two search terms, unless otherwise specified?

• A.OR
• B.NOT
• C.AND
• D.XOR

Comment: *

Name: *

Email: *

Verification: *

By default, which of the following fields would be listed in the fields sidebar under interesting Fields?

• A.host
• B.index
• C.source
• D.sourcetype

Comment: *

Name: *

Email: *

Verification: *