- All Exams Instant Download
Which is one of the directories Splunk will look in to find the script?
When an alert action is configured to run a script, Splunk must be able to locate the script. Which is one of the directories Splunk will look in to find the script?A . $SPLUNK_HOME/bin/scriptsB . $SPLUNK_HOME/etc/scriptsC . $SPLUNK_HOME/bin/etc/scriptsD . $SPLUNK_HOME/etc/scripts/binView AnswerAnswer: A
What does the stats command do?
What does the stats command do?A . Automatically correlates related fieldsB . Converts field values into numerical valuesC . Calculates statistics on data that matches the search criteriaD . Analyzes numerical fields for their ability to predict another discrete fieldView AnswerAnswer: C
By default, which of the following fields would be listed in the fields sidebar under interesting Fields?
By default, which of the following fields would be listed in the fields sidebar under interesting Fields?A . hostB . indexC . sourceD . sourcetypeView AnswerAnswer: D Explanation: The fields sidebar in Splunk shows the default fields and the interesting fields for the events that match your search. The default...
In automatic lookup definitions, the _____ fields are those that are not in the event data.
In automatic lookup definitions, the _____ fields are those that are not in the event data.A . inputB . outputView AnswerAnswer: B
Define the lookup
Define the lookupA . 2,1,3B . 1,2,3C . 2,3,1D . 3,2,1View AnswerAnswer: C
Which stats command function provides a count of how many unique values exist for a given field in the result set?
Which stats command function provides a count of how many unique values exist for a given field in the result set?A . dc(field)B . count(field)C . count-by(field)D . distinct-count(field)View AnswerAnswer: A
By default search results are not returned in ________ order.
By default search results are not returned in ________ order.A . ChronologicalB . Reverser chronologicalC . ASCIED . AlphabeticalView AnswerAnswer: A, D
Which of the following are responsible for reducing search results?
Splunk Components: Which of the following are responsible for reducing search results?A . search headsB . indexersC . forwardersView AnswerAnswer: B
Which events will be returned by the following search string?
Which events will be returned by the following search string? host=www3 status=503A . All events that either have a host of www3 or a status of 503.B . All events with a host of www3 that also have a status of 503C . We need more information: we cannot tell...
Which search string matches only events with the status_code of 4:4?
Which search string matches only events with the status_code of 4:4?A . status_code !=404B . status_code>=400C . status_code<=404D . status code>403 status_code<405View AnswerAnswer: D
