SPLK-1002 Exam Question 6
When using | timechart by host, which field is represented in the x-axis?
SPLK-1002 Exam Question 7
Which statement is true?
SPLK-1002 Exam Question 8
What other syntax will produce exactly the same results as | chart count over vendor_action by user?
SPLK-1002 Exam Question 9
A user wants to create a new field alias for a field that appears in two sourcetypes.
How many field aliases need to be created?
How many field aliases need to be created?
SPLK-1002 Exam Question 10
Based on the macro definition shown below, what is the correct way to execute the macro in a search string?


