SPLK-1001

This function of the stats command allows you to return the middle-most value of field X.A . Median(X)B . Eval by XC . Fields(X)D . Values(X)View AnswerAnswer: A

Query - status != 100:A . Will return event where status field exist but value of that field is not 100.B . Will return event where status field exist but value of that field is not 100 and all events where status field doesn't exist.C . Will get different results...

Forward Option gather and forward data to indexers over a receiving port from remote machines.A . FalseB . TrueView AnswerAnswer: B

How can another user gain access to a saved report?A . The owner of the report can edit permissions from the Edit dropdownB . Only users with an Admin or Power User role can access other users' reportsC . Anyone can access any reports marked as public within a shared...

When displaying results of a search, which of the following is true about line charts?A . Line charts are optimal for single and multiple series.B . Line charts are optimal for single series when using Fast mode.C . Line charts are optimal for multiple series with 3 or more columns.D...

What can be configured using the Edit Job Settings menu?A . Export the results to CSV formatB . Add the Job results to a dashboardC . Schedule the Job to re-run in 10 minutesD . Change Job Lifetime from 10 minutes to 7 days.View AnswerAnswer: D

Three basic components of Splunk are (Choose three.):A . ForwardersB . Deployment ServerC . IndexerD . Knowledge ObjectsE . IndexF . Search HeadView AnswerAnswer: A,C,F

What does the following specified time range do? earliest=-72h@h latest=@dA . Look back 3 days ago and priorB . Look back 72 hours up to one day agoC . Look back 72 hours, up to the end of todayD . Look back from 3 days ago up to the beginning...

What are the three main Splunk components?A . Search head, GPU, streamerB . Search head, indexer, forwarderC . Search head, SQL database, forwarderD . Search head, SSD, heavy weight agentView AnswerAnswer: B Explanation: Reference: https://www.edureka.co/blog/splunk-architecture/

What happens when a field is added to the Selected Fields list in the fields sidebar'?A . Splunk will re-run the search job in Verbose Mode to prioritize the new Selected FieldB . Splunk will highlight related fields as a suggestion to add them to the Selected Fields list.C ....