Which of the following fields is stored with the events in the index?

• A.user
• B.sourcelp
• C.source
• D.location

Comment: *

Name: *

Email: *

Verification: *

How does Splunk determine which fields to extract from data?

• A.Splunk only extracts the most interesting data from the last 24 hours.
• B.Splunk automatically discovers many fields based on sourcetype and key/value pairs found in the data.
• C.Splunk only extracts fields users have manually specified in their data.
• D.Splunk automatically extracts any fields that generate interesting visualizations.

Comment: *

Name: *

Email: *

Verification: *

In monitor option you can select the following options in GUI.

• A.Only HTTP Event Collector (HEC) and TCP/UDP
• B.Only TCP/UDP
• C.Filed & Directories, HTTP Event Collector (HEC), TCP/UDP and Scripts
• D.Only Scripts
• E.None of the above

Comment: *

Name: *

Email: *

Verification: *

Following are the time selection option while making search:
(Choose all that apply.)

• A.Presets
• B.Date & Time Range
• C.Relative
• D.Advanced
• E.Date Range

Comment: *

Name: *

Email: *

Verification: *

Which all time unit abbreviations can you include in Advanced time range picker? (Choose seven.)

• A.week
• B.h
• C.w
• D.y
• E.mon
• F.m
• G.yr
• H.day
• I.d
• J.s

Comment: *

Name: *

Email: *

Verification: *