Question 16

Which of the following is a correct way to limit search results to display the 5 most common values of a field?
  • Question 17

    By default, how long does Splunk retain a search job?
  • Question 18

    These users can create global knowledge objects. (Select all that apply.)
  • Question 19

    What does the following specified time range do?
    earliest=-72h@h latest=@d
  • Question 20

    In the Fields sidebar, what does the number directly to the right of the field name indicate?