Which of the following fields is stored with the events in the index?

1. A. user
2. B. source
3. C. location
4. D. sourceIp

Correct Answer: B

Which statement is true about Splunk alerts?

1. A. Alerts are based on searches that are either run on a scheduled interval or in real-time.
2. B. Alerts are based on searches and when triggered will only send an email notification.
3. C. Alerts are based on searches and require cron to run on scheduled interval.
4. D. Alerts are based on searches that are run exclusively as real-time.

Correct Answer: A

You are able to create new Index in Data Input settings.

1. A. No
2. B. Yes

Correct Answer: B

What can be configured using the Edit Job Settings menu?

1. A. Export the result to CSV format.
2. B. Add the Job results to a dashboard.
3. C. Schedule the Job to re-run in 10 minutes.
4. D. Change Job Lifetime from 10 minutes to 7 days.

Correct Answer: B

Which stats command function provides a count of how many unique values exist for a given field in the result set?

1. A. dc(field)
2. B. count(field)
3. C. count-by(field)
4. D. distinct-count(field)

Correct Answer: A