Nauka
Splunk
Wyświetlane są wszystkie pytania.
Pytanie 17
What is the main requirement for creating visualizations using the Splunk UI?
Your search must transform event data into JSON formatted data first.
Your search must transform event data into statistical data tables first.
Your search must transform event data into Excel file format first.
Your search must transform event data into XML formatted data first.
Pytanie 18
What syntax is used to link key/value pairs in search strings?
action equal purchase
action | purchase
action=purchase
action+purchase
Pytanie 19
What user interface component allows for time selection?
Data source time statistics
Search time picker
Time summary
Time range picker
Pytanie 20
How does Splunk determine which fields to extract from data?
Splunk only extracts the most interesting data from the last 24 hours.
Splunk automatically extracts any fields that generate interesting visualizations.
Splunk automatically discovers many fields based on sourcetype and key/value pairs found in the data.
Splunk only extracts fields users have manually specified in their data.
Pytanie 21
What syntax is used to link key/value pairs in search strings?
Parentheses
Relational operators such as =, <, or >
Quotation marks
@ or # symbols
Pytanie 22
Which search string returns a filed containing the number of matching events and names that field Event Count?
index=security failure | stats count as “Event Count”
index=security failure | stats sum as “Event Count”
index=security failure | stats count by “Event Count”
index=security failure | stats dc(count) as “Event Count”
Pytanie 23
Which of the following index searches would provide the most efficient search performance?
(index=web OR index=sales)
*index=sales AND index=web*
index=web OR index=s*
index=*
Pytanie 24
What is a suggested Splunk best practice for naming reports?
Reports are best named using many numbers so they can be more easily sorted.
Name reports as uniquely as possible with no overlap to differentiate them from one another.
Use a consistent naming convention so they are easily separated by characteristics such as group and object.
Any naming convention is fine as long as you keep an external spreadsheet to keep track.