A user wants to convert field values to string and also to sort on those value. Which command should be used first, the eval or the sort?

• A.Use sort first, then convert the numeric to a string with eval.
• B.You cannot use the sort command and the eval command on the same field.
• C.Convert the numeric to a string with eval first, then sort.
• D.It doesn't matter whether eval or sort is used first.

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements about event types is true? (select all that apply)

• A.Event types can be tagged.
• B.Event types must include a time range,
• C.Event types categorize events based on a search.
• D.Event types can be a useful method for capturing and sharing knowledge.

Comment: *

Name: *

Email: *

Verification: *

The Splunk search language supports the + wildcard.

• A.False
• B.True

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the correct way to use the data model command to search field in the data model within the web dataset?

• A.| Search datamodel web web | filed web*
• B.Datamodel=web | search web | filed web*
• C.| datamodel web web field | search web*
• D.| datamodel web search | filed web *

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements describe the search below? (select all that apply) Index=main I transaction clientip host maxspan=30s maxpause=5s

• A.Events in the transaction occurred within 5 seconds.
• B.The first and last events are no more than 30 seconds apart.
• C.It groups events that share the same clientip and host.
• D.The first and last events are no more than 5 seconds apart.

Comment: *

Name: *

Email: *

Verification: *