Splunk Core Certified User & Splunk Fundamentals 1 Questions And Answers Rated A+

_________ define what users can do in Splunk. - Roles _____________ are reports gathered together into a single pane of glass. - Dashboards A search job will remain active for _____ minutes after it is run. - 10 Adding child data model objects is like the ______ operator in the Splunk search language. A) NOT B) AND C) OR - AND Admins can change the lookup case_sensitive_match option to false in which file? - All of Splunk's configurations are written within what file type? - Plain text *.conf* files. An alert is an action triggered by a _____________. - Saved Search Are search terms case sensitive? - No As the Indexer indexes data, it creates a number of files organized by __________ - *age* (using the timestamps) Every report and visualization is built based on _______. - an underlying searchExternal data used by a Lookup can come from sources like: A) Scripts. B) CSV files. C) None. Only internal data can be used. D) Geospatial data. - Scripts CSV files Geospatial data Field names are ________. - Case sensitive Files indexed using the *upload* input option get indexed _____. - Once