Documentations for Splunk can be found at docs.splunk.com

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

At index time, in which field does Splunk store the timestamp value?

• A.time
• B.EventTime
• C.time
• D.timestamp

Comment: *

Name: *

Email: *

Verification: *

After running a search, what effect does clicking and dragging across the timeline have?

• A.Filters current search results.
• B.Moves to past or future events.
• C.Expands the time range of the search.
• D.Executes a new search.

Comment: *

Name: *

Email: *

Verification: *

By default, which of the following is a Selected Field?

• A.clientip
• B.sourcetype
• C.categoryld
• D.action

Comment: *

Name: *

Email: *

Verification: *

Which statement is true about the top command?

• A.It returns the count and percent columns per row
• B.It returns the top 10 results
• C.All of the above
• D.It displays the output in table format

Comment: *

Name: *

Email: *

Verification: *