SPLUNK TEST QUESTIONS WITH
CORRECT ANSWERS
What command would you use to remove the status field from the returned events? -
Answer- fields -status
T/F A time range picker can be included in a report. - Answer- True
_____________ are reports gathered together into a single pane of glass. - Answer-
Dashboards
T/F Pivots can be saved as dashboard panels - Answer- True
To display the most common values in a specific field, what command would you use? -
Answer- top
How many results are shown by default when using a Top or Rare Command? -
Answer- 10
In a dashboard, a time range picker will only work on panels that include a(n)
__________ search. - Answer- inline
The instant pivot button is displayed in the statistics and visualization tabs when a
_______ search is run. - Answer- non-transforming
These are knowledge objects that provide the data structure for pivot. - Answer- Data
models
T/F A lookup is categorized as a dataset - Answer- True
T/F - Machine Data is always organized - Answer- False
Machine data makes up for more than ___% of the data accumulated by organizations.
- Answer- 90
T/F - Machine data is only generated by web servers - Answer- False
What are the main components of Splunk? - Answer- - search and investigate
- add knowledge
CORRECT ANSWERS
What command would you use to remove the status field from the returned events? -
Answer- fields -status
T/F A time range picker can be included in a report. - Answer- True
_____________ are reports gathered together into a single pane of glass. - Answer-
Dashboards
T/F Pivots can be saved as dashboard panels - Answer- True
To display the most common values in a specific field, what command would you use? -
Answer- top
How many results are shown by default when using a Top or Rare Command? -
Answer- 10
In a dashboard, a time range picker will only work on panels that include a(n)
__________ search. - Answer- inline
The instant pivot button is displayed in the statistics and visualization tabs when a
_______ search is run. - Answer- non-transforming
These are knowledge objects that provide the data structure for pivot. - Answer- Data
models
T/F A lookup is categorized as a dataset - Answer- True
T/F - Machine Data is always organized - Answer- False
Machine data makes up for more than ___% of the data accumulated by organizations.
- Answer- 90
T/F - Machine data is only generated by web servers - Answer- False
What are the main components of Splunk? - Answer- - search and investigate
- add knowledge
