- All Exams Instant Download
Which statement is true about Splunk alerts?
Which statement is true about Splunk alerts?A . Alerts are based on searches that are either run on a scheduled interval or in real-time.B . Alerts are based on searches and when triggered will only send an email notification.C . Alerts are based on searches and require cron to run...
Which of the following is a best practice when writing a search string?
Which of the following is a best practice when writing a search string?A . Include all formatting commands before any search termsB . Include at least one function as this is a search requirementC . Include the search terms at the beginning of the search stringD . Avoid using formatting...
What syntax is used to link key/value pairs in search strings?
What syntax is used to link key/value pairs in search strings?A . ParenthesesB . @ or # symbolsC . Quotation marksD . Relational operators such as =, <, or >View AnswerAnswer: D
Which is a primary function of the timeline located under the search bar?
Which is a primary function of the timeline located under the search bar?A . To differentiate between structured and unstructured events in the dataB . To sort the events returned by the search command in chronological orderC . To zoom in and zoom out. although this does not change the...
Define the lookup
Define the lookupA . 2,1,3B . 1,2,3C . 2,3,1D . 3,2,1View AnswerAnswer: C
Which of the following commands will show the maximum bytes?
Which of the following commands will show the maximum bytes?A . sourcetype=access_* | maximum totals by bytesB . sourcetype=access_* | avg (bytes)C . sourcetype=access_* | stats max(bytes)D . sourcetype=access_* | max(bytes)View AnswerAnswer: C
What must be done in order to use a lookup table in Splunk?
What must be done in order to use a lookup table in Splunk?A . The lookup must be configured to run automatically.B . The contents of the lookup file must be copied and pasted into the search bar.C . The lookup file must be uploaded to Splunk and a lookup...
A collection of items containing things such as data inputs, UI elements, and knowledge objects is known as what?
A collection of items containing things such as data inputs, UI elements, and knowledge objects is known as what?A . An appB . JSONC . A roleD . An enhanced solutionView AnswerAnswer: A
What user interface component allows for time selection?
What user interface component allows for time selection?A . Time summaryB . Time range pickerC . Search time pickerD . Data source time statisticsView AnswerAnswer: B
Which of the following are functions of the stats command?
Which of the following are functions of the stats command?A . count, sum, addB . count, sum, lessC . sum, avg, valuesD . sum, values, tableView AnswerAnswer: C
