When looking at a statistics table, what is one way to drill down to see the underlying events?
When looking at a statistics table, what is one way to drill down to see the underlying events?A . Creating a pivot table.B . Clicking on the visualizations tab.C . Viewing your report in a dashboard.D . Clicking on any field value in the table.View AnswerAnswer: D
What are the steps to schedule a report?
What are the steps to schedule a report?A . After saving the report, click Schedule.B . After saving the report, click Event Type.C . After saving the report, click Scheduling.D . After saving the report, click Dashboard Panel.View AnswerAnswer: A
Which command is used to review the contents of a specified static lookup file?
Which command is used to review the contents of a specified static lookup file?A . lookupB . csvlookupC . inputlookupD . outputlookupView AnswerAnswer: C
What must be done before an automatic lookup can be created? (Choose all that apply.)
What must be done before an automatic lookup can be created? (Choose all that apply.)A . The lookup command must be used.B . The lookup definition must be created.C . The lookup file must be uploaded to Splunk.D . The lookup file must be verified using the inputlookup command.View AnswerAnswer:...
Which of the following statements about case sensitivity is true?
Which of the following statements about case sensitivity is true?A . Both field names and field values ARE case sensitive.B . Field names ARE case sensitive; field values are NOD . Field values ARE case sensitive; field names ARE NOF . Both field names and field values ARE NOT case...
How does Splunk determine which fields to extract from data?
How does Splunk determine which fields to extract from data?A . Splunk only extracts the most interesting data from the last 24 hours.B . Splunk only extracts fields users have manually specified in their data.C . Splunk automatically extracts any fields that generate interesting visualizations.D . Splunk automatically discovers many...
How can it be added to the fields sidebar?
A field exists in search results, but isn’t being displayed in the fields sidebar. How can it be added to the fields sidebar?A . Click All Fields and select the field to add it to Selected Fields.B . Click Interesting Fields and select the field to add it to Selected...
Which stats command function provides a count of how many unique values exist for a given field in the result set?
Which stats command function provides a count of how many unique values exist for a given field in the result set?A . dc(field)B . count(field)C . count-by(field)D . distinct-count(field)View AnswerAnswer: A Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Usethestatscommandandfunctions
Which of the following is a Splunk search best practice?
Which of the following is a Splunk search best practice?A . Filter as early as possible.B . Never specify more than one index.C . Include as few search terms as possible.D . Use wildcards to return more search results.View AnswerAnswer: A
When editing a dashboard, which of the following are possible options? (Choose all that apply.)
When editing a dashboard, which of the following are possible options? (Choose all that apply.)A . Add an output.B . Export a dashboard panel.C . Modify the chart type displayed in a dashboard panel.D . Drag a dashboard panel to a different location on the dashboard.View AnswerAnswer: C