Which of the following is true about user account settings and preferences?

• A.Full names can only be changed by accounts with a Power User or Admin role.
• B.Full name, time zone, and default app can be defined by clicking the login name in the Splunk bar.
• C.Time zones are automatically updated based on the setting of the computer accessing Splunk.
• D.Search & Reporting is the only app that can be set as the default application.

Comment: *

Name: *

Email: *

Verification: *

By default, which of the following fields would be listed in the fields sidebar under interesting Fields?

• A.source
• B.sourcetype
• C.index
• D.host

Comment: *

Name: *

Email: *

Verification: *

Query - status != 100:

• A.Will get different results depending on data
• B.Will return event where status field exist but value of that field is not 100 and all events where status field doesn't exist.
• C.Will return event where status field exist but value of that field is not 100.

Comment: *

Name: *

Email: *

Verification: *

Which of the following searches would return events with failure in index netfw or warn or critical in index netops?

• A.(index=netfw failure) OR index=netops OR (warn OR critical)
• B.(index=netfw failure) AND (index=netops (warn OR critical))
• C.(index=netfw failure) AND index=netops warn OR critical
• D.(index=netfw failure) OR (index=netops (warn OR critical))

Comment: *

Name: *

Email: *

Verification: *

Following are the time selection option while making search:
(Choose all that apply.)

• A.Date & Time Range
• B.Presets
• C.Date Range
• D.Relative
• E.Advanced

Comment: *

Name: *

Email: *

Verification: *