Splunk Core Certified User & Splunk Fundamentals 1 questions and answers 2023

Splunk Core Certified User & Splunk Fundamentals 1 questions and answers 2023T/F: Machine data is always structured. False. Machine data can be structured or unstructured. Machine data makes up for more than ___% of the data accumulated by organizations. 90 T/F: Machine data is only generated by web servers. False Search requests are processed by the ___________. Indexers Search strings are sent from the _________. Search Head In most Splunk deployments, ________ serve as the primary way data is supplied for indexing. Forwarders Which of these is not a main component of Splunk? A) Search and investigate. B) Compress and archive. C) Add knowledge. D) Collect and index data. B) Compress and archive What are the three main processing components of Splunk? (Select all that apply.) A) Indexers B) Deployment Maker C) Search Heads D) Forwarders E) Distributors A) Indexers C) Search Heads D) Forwarders _________ define what users can do in Splunk. A) Tokens B) Disk permissions C) Roles C) Roles This role will only see their own knowledge objects and those that have been shared with them. A) User B) Power C) Admin A) User T/F: You can launch and manage apps from the home app. True What are the three main default roles in Splunk Enterprise? (Select all that apply.) A) King B) User C) Manager D) Admin E) Power B) User D) Admin E) Power Which apps ship with Splunk Enterprise? (Select all that apply.) A) Home App B) Sideview Utils C) Search & Reporting D) DB Connect A) Home App C) Search & Reporting