Which component of Splunk let us write SPL query to find the required data?
A. Forwarders
B. Indexer
C. Heavy Forwarders
D. Search head
Which search string matches only events with the status_code of 4:4?
A.
status_code !=404
B.
status_code>=400
C.
status_code<=404
D.
status code>403 status_code<40
status_code>=400
Which search string is the most efficient?
A. "failed password"
B. ''failed password"*
C. index=* "failed password"
D. index=security "failed password"
Which symbol is used to snap the time?
A. @
B. &
C. *
D. #
In the Search and Reporting app, which tab displays timecharts and bar charts?
A. Events
B. Patterns
C. Statistics
D. Visualization
Which search string is the most efficient?
When sorting on multiple fields with the sort command, what delimiter can be used between the field names in the search?
A.
|
B.
$
C.
!
D.
,
,
Page 6 out of 41 Pages |
Previous |