WorksheetsKibana Machine Learning Workshop
Total questions: 7
Worksheet time: 2mins
Question 1: What does this KQL query do?
status: 500
A. Finds documents where status is not 500
B. Finds documents where status is 500
C. Finds documents with status codes above 500
D. Sorts logs by status
Question 2: What is the first step in the Advanced Job wizard in Kibana?
A. Select the influencer
B. Configure the detector
C. Select the index pattern
D. Set the bucket span
Question 3: Which of the following is a valid ML function for a detector?
A. count
B. mean
C. sum
D. All of the above
Question 4: What is the role of "influencers" in an ML job?
A. They determine how data is visualized
B. They group the index fields
C. They help explain the cause of an anomaly
D. They run the anomaly detection
Question 5: You want to detect unusual login activity per user. Which setup is most appropriate?
A. Detector: count, Partition Field: user.keyword
B. Detector: mean, Field: response_time, No partition
C. Detector: distinct_count, Field: user.keyword
D. Detector: sum, Field: bytes, Partition: host
Question 6: What is the purpose of machine learning in Kibana?
A. Generate visualizations automaticall
B. Find anomalies in time-series data
C. Optimize Elasticsearch clusters
D. Create dashboards from logs
Question 7: What is an "anomaly" in Kibana ML?
A. A duplicate document
B. A common event
C. An unexpected pattern or behavior in data
D. A slow query
