Splunk indexes the data on the basis of timestamps.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements are correct about Search & Reporting App? (Choose three.)

• A.Enables the user to create knowledge object, reports, alerts and dashboards.
• B.It only gives us search functionality.
• C.Provides default interface for searching and analyzing logs.
• D.Can be accessed by Apps > Search & Reporting.

Comment: *

Name: *

Email: *

Verification: *

After running a search, what effect does clicking and dragging across the timeline have?

• A.Executes a new search.
• B.Filters current search results.
• C.Moves to past or future events.
• D.Expands the time range of the search.

Comment: *

Name: *

Email: *

Verification: *

In a deployment with multiple indexes, what will happen when a search is run and an index is not specified in the search string?

• A.All non-indexed events to which the user has access will be returned.
• B.Events from every index searched by default to which the user has access will be returned.
• C.No events will be returned.
• D.Splunk will prompt you to specify an index.

Comment: *

Name: *

Email: *

Verification: *

Which search matches the events containing the terms "error" and "fail"?

• A.index=security error OR fail
• B.index=security Error Fail
• C.index=security NOT error NOT fail
• D.index=security "error failure"

Comment: *

Name: *

Email: *

Verification: *