Data model are composed of one or more of which of the following datasets? (select all that apply.)

• A.Events datasets
• B.Search datasets
• C.Transaction datasets
• D.Any child of event, transaction, and search datasets

Comment: *

Name: *

Email: *

Verification: *

Which of the following commands support the same set of functions?

• A.stats, eval, table
• B.stats, chart, timechart
• C.search, where, eval
• D.transaction, chart, timechart

Comment: *

Name: *

Email: *

Verification: *

What is the Splunk Common Information Model (CIM)?

• A.The CIM defines an ecosystem of apps that can be fully supported by Splunk.
• B.The CIM provides a methodology to normalize data from different sources and source types.
• C.The CIM is a prerequisite that any data source must meet to be successfully onboarded into Splunk.
• D.The CIM is a data exchange initiative between software vendors.

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements describes the command below (select all that apply) Sourcetype=access_combined | transaction JSESSIONID

• A.An additional field named duration is created.
• B.Events with the same JSESSIONID will be grouped together into a single event.
• C.An additional filed named maxspan is created.
• D.An additional field named eventcount is created.

Comment: *

Name: *

Email: *

Verification: *

Which of the following searches would return a report of sales by product-name?

• A.chart sales by product_name
• B.chart sum(price) as sales by product_name
• C.stats sum(price) as sales over product_name
• D.timechart list(sales), values(product_name)

Comment: *

Name: *

Email: *

Verification: *