Weekend Sale - Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sntaclus

Which of the following represents the Splunk recommended naming convention for dashboards?

A.

Description_Group_Object

B.

Group_Description_Object

C.

Group_Object_Description

D.

Object_Group_Description

In a deployment with multiple indexes, what will happen when a search is run and an index is not specified in the search string?

A.

No events will be returned.

B.

Splunk will prompt you to specify an index.

C.

All non-indexed events to which the user has access will be returned.

D.

Events from every index searched by default to which the user has access will be returned.

Which of the following reports is available in the Fields window?

A.

Top values by time

B.

Rare values by time

C.

Events with top value fields

D.

Events with rare value fields

Which search string returns a filed containing the number of matching events and names that field Event Count?

A.

index=security failure | stats sum as “Event Count”

B.

index=security failure | stats count as “Event Count”

C.

index=security failure | stats count by “Event Count”

D.

index=security failure | stats dc(count) as “Event Count”

You can also specify a time range in the search bar. You can use the following for beginning and ending for a

time range (Choose two.):

A.

Not possible to specify time manually in Search query

B.

end=

C.

start=

D.

earliest=

E.

latest=

Documentations for Splunk can be found at docs.splunk.com

A.

True

B.

False

After running a search, what effect does clicking and dragging across the timeline have?

A.

Executes a new search.

B.

Filters current search results.

C.

Moves to past or future events.

D.

Expands the time range of the search.

Which of the following statements about case sensitivity is true?

A.

Both field names and field values ARE case sensitive.

B.

Field names ARE case sensitive; field values are NOT.

C.

Field values ARE case sensitive; field names ARE NOT.

D.

Both field names and field values ARE NOT case sensitive.

Which events will be returned by the following search string?

host=www3 status=503

A.

All events that either have a host of www3 or a status of 503.

B.

All events with a host of www3 that also have a status of 503

C.

We need more information: we cannot tell without knowing the time range

D.

We need more information a search cannot be run without specifying an index

Which of the following is an option after clicking an item in search results?

A.

Saving the item to a report

B.

Adding the item to the search.

C.

Adding the item to a dashboard

D.

Saving the search to a JSON file.