Intro to Spllunk

Which search mode behaves differently depending on the type of search being run?

• Verbose

• Variable

• Fast

• Smart

Which Splunk infrastructure component stores ingested data?

• Index

• Data models

• Dashboards

• Datasets

What determines the timestamp shown on returned events in a search?

• The time zone defined in user settings

• Timestamps are displayed in Greenwich Mean Time

• The time zone where the event originated

• Timestamps are displayed in epoch time

When a search is run, in what order are events returned?

• Reverse alphanumeric order

• Chronological order

• Reverse chronological order

  
  

• Alphanumeric order

  
  

Which of the following searches will return results containing the terms failed, password, or failed password?

• • failed OR password

  
  

• • failed password OR "failed password"

  
  

• • fail*

  
  

• • failed OR password OR "failed password"

  
  

By default, who is able to view a saved report?

• Any user with the viewreports capability

  
  

• The user who created it

  
  

• The user who created it or any user with an admin role

  
  

• Any user with a power or admin role

  
  

Which of the following booleans can be used in a search?

• • OR

• • NOT

• • AND

• • ALSO

By default, how long does a search job remain active?

• 30 minutes

• 10 minutes

• 7 days

Which of the following searches will return results containing the words fail, failure, or failed?

• *fail

• fail

• fail*

• fail+

By default, which of the following roles are required to share knowledge objects?

• • Admin

• • Power

• • User

  
  

• • Manager