How are events displayed after a search is executed?

• A.Alphabetically according to field name.
• B.Randomly by default.
• C.In chronological order.
• D.In reverse chronological order.

Comment: *

Name: *

Email: *

Verification: *

Zoom Out and Zoom to Selection re-executes the search.

• A.No
• B.Yes

Comment: *

Name: *

Email: *

Verification: *

What can be included in the All Fields option in the sidebar?

• A.Dashboards
• B.Metadata only
• C.Non-interesting fields
• D.Field descriptions

Comment: *

Name: *

Email: *

Verification: *

By default, which of the following fields would be listed in the fields sidebar under Interesting Fields?

• A.sourcetype
• B.index
• C.source
• D.host

Comment: *

Name: *

Email: *

Verification: *

At index time, in which field does Splunk store the timestamp value?

• A.EventTime
• B._time
• C.timestamp
• D.time

Comment: *

Name: *

Email: *

Verification: *