What are the different options while setting up alerts?
What are the types of search modes supported in splunk?
What are the formats in which search result be exported?
What are the components of splunk/splunk architecture?
What is the main difference between sort + and sort -?
What are most important configuration files of splunk or can you tell name of few important configuration files in splunk?
List various types of splunk dashboards?
Explain how data ages in splunk?
What is table command?
What are the types of alerts in splunk?
What are types of splunk licenses?
Briefly explain the splunk architecture?
Explain how indexer stores various indexes?
Explain search factor (sf) & replication factor (rf)?
What is lookup command?