According to Splunk best practices, which placement of the wildcard results in the most efficient search?

• A.f*il
• B.fail*
• C.*fail
• D.*fail*

Comment: *

Name: *

Email: *

Verification: *

This search will return 20 results. SEARCH: error | top host limit = 20

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

In a deployment with multiple indexes, what will happen when a search is run and an index is not specified in the search string?

• A.No events will be returned.
• B.Splunk will prompt you to specify an index.
• C.All non-indexed events to which the user has access will be returned.
• D.Events from every index searched by default to which the user has access will be returned.

Comment: *

Name: *

Email: *

Verification: *

How can another user gain access to a saved report?

• A.The owner of the report must clone the original report and save it to their user account
• B.Only users with an Admin or Power User role can access other users' reports
• C.Anyone can access any reports marked as public within a shared Splunk deployment
• D.The owner of the report can edit permissions from the Edit dropdown

Comment: *

Name: *

Email: *

Verification: *

Which of the following are functions of the stats command?

• A.sum, avg. values
• B.count, sum, less
• C.count, sum, add
• D.sum, values, table

Comment: *

Name: *

Email: *

Verification: *