It is no possible for a single instance of Splunk to manage the input, parsing and indexing of machine data.

• A.True
• B.False

Comment: *

Name: *

Email: *

Verification: *

Which of the statements are correct? (Choose three.)

• A.Zoom to selection: Narrows the time range and doesn't re-executes the search.
• B.Format Timeline: Hides or shows the timeline in different views.
• C.Zoom-out: Expands the time focus and re-executes the search.
• D.Zoom to selection: Narrows the time range and re-executes the search.
• E.Zoom-Out: Expands the time focus and doesn't re-executes the search.

Comment: *

Name: *

Email: *

Verification: *

What does the rarecommand do?

• A.Returns the least common field values of a given field in the results.
• B.Returns the most common field values of a given field in the results.
• C.Returns the top 10 field values of a given field in the results.
• D.Returns the lowest 10 field values of a given field in the results.

Comment: *

Name: *

Email: *

Verification: *

Assuming a user has the capability to edit reports, which of the following are editable?

• A.The report's name, schedule, permissions
• B.The report's name, acceleration, schedule
• C.The report's name, acceleration, permissions
• D.Acceleration, schedule, permissions

Comment: *

Name: *

Email: *

Verification: *

When looking at a dashboard panel that is based on a report, which of the following is true?

• A.You can modify the search string in the panel, and you can change and configure the visualization.
• B.You can modify the search string in the panel, but you cannot change and configure the visualization.
• C.You cannot modify the search string in the panel, but you can change and configure the visualization.
• D.You cannot modify the search string in the panel, and you cannot change and configure the visualization.

Comment: *

Name: *

Email: *

Verification: *