A.Adding the item to the search.

B.Saving the item to a report

C.Saving the search to a JSON file.

D.Adding the item to a dashboard

A.Timeline shows distribution of events specified in the time range in the form of bars.

B.This is default view and you can't make any changes to it.

C.You can hover your mouse for details like total events, time and date.

D.Single click to see the result for particular time period.

E.You can click and drag across the bar for selecting the range.

A.Line charts are optimal for multiple series with 3 or more columns

B.Line charts are optimal for single series when using Fast mode

C.Line charts are optimal for single and multiple series

D.Line charts are optimal for multiseries searches with at least 2 or more columns

A.Splunk will re-run the search job in Verbose Mode to prioritize the new Selected Field.

B.Splunk will highlight related fields as a suggestion to add them to the Selected Fields list.

C.Custom selections will replace the Interesting Fields that Splunk populated into the list at search time.

D.The selected field and its corresponding values will appear underneath the events in the search results.

A.Search & Reporting is the only app that can be set as the default application.

B.Full names can only be changed by accounts with a Power User or Admin role.

C.Time zones are automatically updated based on the setting of the computer accessing Splunk.

D.Full name, time zone, and default app can be defined by clicking the login name in the Splunk bar.