Interesting fields are the fields that have at least 20% of resulting fields.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Fields are searchable key value pairs in your event data.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Which of the following is true about user account settings and preferences?

• A.Time zones are automatically updated based on the setting of the computer accessing Splunk.
• B.Full names can only be changed by accounts with a Power User or Admin role.
• C.Full name, time zone, and default app can be defined by clicking the login name in the Splunk bar.
• D.Search & Reporting is the only app that can be set as the default application.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is an option after clicking an item in search results?

• A.Saving the search to a JSON file.
• B.Adding the item to a dashboard
• C.Saving the item to a report
• D.Adding the item to the search.

Comment: *

Name: *

Email: *

Verification: *

Which of the following fields is stored with the events in the index?

• A.user
• B.source
• C.location
• D.sourceIp

Comment: *

Name: *

Email: *

Verification: *