Quick Links
Why Us
Unlimited Packages
Site Secure
TESTED 23 Nov 2024
We Accept
Which Field/Value pair will return only events found in the index named security?
Which of the following searches will return results where fail, 400, and error exist in every event?
_______________ transforms raw data into events and distributes the results into an index.
How many minutes, by default, is the time to live (ttl) for an ad-hoc search job?
Search Assistant is enabled by default in the SPL editor with compact settings.
The command shown here does witch of the following: Command: |outputlookup products.csv
Forward Option gather and forward data to indexers over a receiving port from remote machines.
When using the top command in the following search, which of the following will be true about the results?
index="main" sourcetype="access_*" action="purchase" | top 3 statusCode by user showperc=f countfield=status_code_count
Which search will return the 15 least common field values for the dest_ip field?
Use this command to use lookup fields in a search and see the lookup fields in the field sidebar.
Which of the following represents the Splunk recommended naming convention for dashboards?
You can use the following options to specify start and end time for the query range:
Which of the following searches will show the number of categoryld used by each host?
By default, which of the following fields would be listed in the fields sidebar under interesting Fields?
When sorting on multiple fields with the sort command, what delimiter can be used between the field names in the search?
Which of the following are Splunk premium enhanced solutions? (Choose three.)
What is the proper SPL terminology for specifying a particular index in a search?
When saving a search directly to a dashboard panel instead of saving as a report first, which of the following is
created?
Which stats command function provides a count of how many unique values exist for a given field in the result set?
Which all time unit abbreviations can you include in Advanced time range picker? (Choose seven.)
What is the correct syntax to count the number of events containing a vendor_action field?
When writing searches in Splunk, which of the following is true about Booleans?
Which component of Splunk let us write SPL query to find the required data?
In automatic lookup definitions, the _____ fields are those that are not in the event data.
The four types of Lookups that Splunk provides out-of-the-box are External, KV Store, Geospatial and which of the following?
Which of the following is the most efficient filter for running searches in Splunk?
Put query into separate lines where | (Pipes) are used by selecting following options.
It is mandatory for the lookup file to have this for an automatic lookup to work.
When editing a dashboard, which of the following are possible options? (select all that apply)
Splunk users are assigned roles. Which of the following do roles determine?
Which of the following is a metadata field assigned to every event in Splunk?
Following are the time selection option while making search:
(Choose all that apply.)
In the Splunk interface, the list of alerts can be filtered based on which characteristics?
Which search string returns a filed containing the number of matching events and names that field Event Count?
What is the result of the following search?
index=myindex source=c: \mydata. txt NOT error=*
Beginning parentheses is automatically highlighted to guide you on the presence of complimenting
parentheses.
Which command automatically returns percent and count columns when executing searches?
TESTED 23 Nov 2024