SPLK-1002 Exam Question 101

The macro weekly_sales (2) contains the search string:
index=games | eval ProductSales = $Price$ * $AmountSold$
Which of the following will return results?
  • SPLK-1002 Exam Question 102

    Consider the the following search run over a time range of last 7 days:
    index=web sourcetype=access_conbined | timechart avg(bytes) by product_nane Which option is used to change the default time span so that results are grouped into 12 hour intervals?
  • SPLK-1002 Exam Question 103

    What commands can be used to group events from one or more data sources?
  • SPLK-1002 Exam Question 104

    When would transaction be used instead of stats?
  • SPLK-1002 Exam Question 105

    When using | timechart by host, which field is represented in the x-axis?