SPLK-1002 Exam Question 101
The macro weekly_sales (2) contains the search string:
index=games | eval ProductSales = $Price$ * $AmountSold$
Which of the following will return results?
index=games | eval ProductSales = $Price$ * $AmountSold$
Which of the following will return results?
SPLK-1002 Exam Question 102
Consider the the following search run over a time range of last 7 days:
index=web sourcetype=access_conbined | timechart avg(bytes) by product_nane Which option is used to change the default time span so that results are grouped into 12 hour intervals?
index=web sourcetype=access_conbined | timechart avg(bytes) by product_nane Which option is used to change the default time span so that results are grouped into 12 hour intervals?
SPLK-1002 Exam Question 103
What commands can be used to group events from one or more data sources?
SPLK-1002 Exam Question 104
When would transaction be used instead of stats?
SPLK-1002 Exam Question 105
When using | timechart by host, which field is represented in the x-axis?
