Which Field/Value pair will return only events found in the index named security?

• A.Index=Security
• B.index=Security
• C.Index=security
• D.index!=Security

Comment: *

Name: *

Email: *

Verification: *

Splunk extracts fields from event data at index time and at search time.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

How does Splunk determine which fields to extract from data?

• A.Splunk automatically extracts any fields that generate interesting visualizations.
• B.Splunk only extracts fields users have manually specified in their data.
• C.Splunk only extracts the most interesting data from the last 24 hours.
• D.Splunk automatically discovers many fields based on sourcetype and key/value pairs found in the data.

Comment: *

Name: *

Email: *

Verification: *

Monitor option in Add Data provides _______________.

• A.Only One-time monitoring.
• B.None of the above.
• C.Both One-time and continuous monitoring
• D.Only continuous monitoring.

Comment: *

Name: *

Email: *

Verification: *

Splunk internal fields contains general information about events and starts from underscore i.e. _ .

• A.False
• B.True

Comment: *

Name: *

Email: *

Verification: *