Splunk Core Certified User & Splunk Fundamentals 1 Questions And Answers With Verified Solutions

_________ define what users can do in Splunk. A) Tokens B) Disk permissions C) Roles - C) Roles _____________ are reports gathered together into a single pane of glass. A) Dashboards B) Panels C) Alerts D) Scheduled Reports - A) Dashboards A search job will remain active for _____ minutes after it is run. A) 5 B) 10 C) 30 D) 60 E) 90 - B) 10 Adding child data model objects is like the ______ operator in the Splunk search language. A) NOT B) ANDC) OR - B) AND Admins can change the lookup case_sensitive_match option to false in which file? - All of Splunk's configurations are written within what file type? - Plain text *.conf* files. An alert is an action triggered by a _____________. A) Selected field B) Tag C) Report D) Saved search - D) Saved Search