By default, which of the following fields would be listed in the fields sidebar under interesting Fields?
A.
host
B.
index
C.
C. source
D.
sourcetype
host
By default, which role contains the minimum permissions required to have write access to Splunk alerts?
A. User
B. Alerting
C. Power
D. Admin
Explanation: The Power role contains the minimum permissions required to have write access to Splunk alerts. The User role can only view alerts created by others, but cannot create or modify them. The Alerting role is not a default role in Splunk, but a custom one that can be created by an administrator. The Admin role has write access to Splunk alerts, but also has many other permissions that are not necessary for alerting3.
Which search would return events from the access_combined sourcetype?
A. Sourcetype=access_combined
B. Sourcetype=Access_Combined
C. sourcetype=Access_Combined
D. SOURCETYPE=access_combined
Explanation: The search query sourcetype=access_combined would return events from the access_combined sourcetype, which is a predefined sourcetype in Splunk that matches the access-common or access-combined Apache logging formats1. The sourcetype field is case-sensitive, so using different capitalization such as Access_Combined or ACCESS_COMBINED would not match the exact sourcetype name2. The sourcetype field is also a default field that is added by the indexer when it indexes the data, so it does not need to be enclosed in quotation marks3.
What is the correct way to use a time range specifier in the search bar so that the search looks back 2 hours?
A. latest=-2h
B. earliest=-2h
C. latest=-2hour@d
D. earliest=-2hour@d
This function of the stats command allows you to return the middle-most value of field X.
A.
Median(X)
B.
Eval by X
C.
Fields(X)
D.
Values(X)
Median(X)
Which search will return only events containing the word “error” and display the results as a table that includes the fields named action, src, and dest?
A. error | table action, src, dest
B. error | tabular action, src, dest
C. error | stats table action, src, dest
D. error | table column=action column=src column=dest
| Page 4 out of 41 Pages |
| Previous |
Contact Us - Privacy Policy ... Copyright © - All Rights Reserved