Splunk 1001 questions with correct answers

Which Field/Value pair will return only events found in the index named security? A: Index=Security B: index=Security C: Index=security D: index!=Security CORRECT ANSWER index=Security Which statement describes field discovery at search time? A: Splunk automatically discovers only numeric fields B: Splunk automatically discovers only alphanumeric fields C: Splunk automatically discovers only manually configured fields D: Splunk automatically discovers only fields directly related to the search results CORRECT ANSWER Splunk automatically discovers only fields directly related to the search results What are the three main Splunk components? A: Search head, GPU, streamer B: Search head, indexer, forwarder C: Search head, SQL database, forwarder D: Search head, SSD, heavy weight agent CORRECT ANSWER Search head, indexer, forwarder When is an alert triggered?