Nauka

Splunk

Wyświetlane są wszystkie pytania.
Pytanie 49
Which is primary function of the timeline located under the search bar?
To sort the events returned by the search command in chronological order.
To differentiate between structured and unstructured events in the data.
To zoom in and zoom out, although this does not change the scale of the chart.
To show peaks and/or valleys in the timeline, which can indicate spikes in activity or downtime.
Pytanie 50
What can be configured using the Edit Job Settings menu?
Add the Job results to a dashboard.
Change Job Lifetime from 10 minutes to 7 days.
Schedule the Job to re-run in 10 minutes.
Export the result to CSV format.
Pytanie 51
Which command is used to validate a lookup file?
| lookup products.csv
inputlookup products.csv
| inputlookup products.csv
| lookup_definition products.csv
Pytanie 52
How can another user gain access to a saved report?
The owner of the report must clone the original report and save it to their user account.
Only users with an Admin or Power User role can access other users’ reports.
The owner of the report can edit permissions from the Edit dropdown.
Anyone can access any reports marked as public within a shared Splunk deployment.
Pytanie 53
What is the primary use for the rare command?
To sort field values in descending order.
To return only fields containing five of fewer values.
To find the least common values of a field in a dataset.
To find the fields with the fewest number of values across a dataset.
Pytanie 54
What happens when a field is added to the Selected Fields list in the fields sidebar?
Splunk will re-run the search job in Verbose Mode to prioritize the new Selected Field.
Splunk will highlight related fields as a suggestion to add them to the Selected Fields list.
The selected field and its corresponding values will appear underneath the events in the search results.
Custom selections will replace the Interesting Fields that Splunk populated into the list at search time.
Pytanie 55
Three basic components of Splunk are (Choose three.):
Knowledge Objects
Indexer
Search Head
Index
Forwarders
Deployment Server
Pytanie 56
What is Splunk?
Splunk is a software platform to search, analyze and visualize the machine-generated data.
Security Information and Event Management (SIEM).
Database management tool.
Cloud based application that help in analyzing logs.