A.inputlookup

B.csvlookup

C.outputlookup

A.2

B.3

C.1

D.4

A.Line charts are optimal for single and multiple series.

B.Line charts are optimal for multiseries searches with at least 2 or more columns.

C.Line charts are optimal for single series when using Fast mode.

D.Line charts are optimal for multiple series with 3 or more columns.

A.Time zones are automatically updated based on the setting of the computer accessing Splunk.

B.Search & Reporting is the only app that can be set as the default application.

C.Full names can only be changed by accounts with a Power User or Admin role.

D.Full name, time zone, and default app can be defined by clicking the login name in the Splunk bar.

A.index=security NOT error NOT fail

B.index=security Error Fail

C.index=security error OR fail

D.index=security "error failure"