Splunk Core Certified Power User |156 questions| with correct answers

What is the only writeable bucket type? CORRECT ANSWER The hot bucket By what filter are indexes divided into buckets? CORRECT ANSWER By time What are the 4 types of searches in Splunk (by performance) CORRECT ANSWER Dense, Sparse, Super Sparse, Rare In searches, what is the scanCount? CORRECT ANSWER The number of events scanned for that particular search What are the requirement of the underlying search in order to get multi-series table? CORRECT ANSWER The underlying search must use reporting search commands like chart or timechart What are the seven chart types? CORRECT ANSWER Line, Area, Column, Bar, Bubble, Scatter and Pie What is a trait of scatter charts? CORRECT ANSWER Can only show two dimensions. Shows trends in the relationship between discrete data values What is a trait of bubble charts? CORRECT ANSWER Provides a visual way to view a three dimensional series What are two commonly used clauses for chart? CORRECT ANSWER over and by What does the over and by clauses do when used with chart? CORRECT ANSWER divides the data into sub-groupings (True/False) You can only split chart results over two dimensions CORRECT ANSWER True