Splunk Core Certified User - Statistical
Processing EXAM
When using the top command, add the BY clause to ___________.
(A) Specify how many results to return
(B) Return results grouped by the field you specify in the BY clause
(C) Return a percentage of events
(D) Specify which search mode to return results by - Correct Answers -(B) Return
results grouped by the field you specify in the BY clause
To display the least common values of a filed, use the _______ command.
(A) Rare
(B) Top
(C) Timechart with common=f option
(D) Stats - Correct Answers -(A) Rare
By default, the sort command lists results in ____ order
(A) Ascending
(B) Descending - Correct Answers -(A) Ascending
If you use the stats command with two funtions and a BY clause, which function is the
BY clause applied to?
(A) Both functions
(B) The 1st function
(C) The 2nd function
(D) Both functions if they are both aggregate functions - Correct Answers -(A) The 2nd
function
Which of these functions lists ALL values of the field X?
(A) values(X)
(B) list(X) - Correct Answers -(A) values(X)
Processing EXAM
When using the top command, add the BY clause to ___________.
(A) Specify how many results to return
(B) Return results grouped by the field you specify in the BY clause
(C) Return a percentage of events
(D) Specify which search mode to return results by - Correct Answers -(B) Return
results grouped by the field you specify in the BY clause
To display the least common values of a filed, use the _______ command.
(A) Rare
(B) Top
(C) Timechart with common=f option
(D) Stats - Correct Answers -(A) Rare
By default, the sort command lists results in ____ order
(A) Ascending
(B) Descending - Correct Answers -(A) Ascending
If you use the stats command with two funtions and a BY clause, which function is the
BY clause applied to?
(A) Both functions
(B) The 1st function
(C) The 2nd function
(D) Both functions if they are both aggregate functions - Correct Answers -(A) The 2nd
function
Which of these functions lists ALL values of the field X?
(A) values(X)
(B) list(X) - Correct Answers -(A) values(X)
