Explain Trouble shooting Splunk errors in splunk?
What is the difference between stats and timechart command?
If I want to add/onboard folder access logs from a windows machine to splunk how can I add same?
Differentiate between inputlookup & outputlookup commands.
Define splunk db connect?
Discuss about the sequence in which splunk upgrade can be done in a clustered environment?
What is the difference between index time and search time?
Explain search factor (sf)?
What is summary index in Splunk?
What is a splunk forwarder and what are types of splunk forwarder?
Define search head clustering?
What is a join command?
List out some splunk search commands?
Why should we use splunk alert? What are the different options while setting up alerts?
Which splunk roles can share the same machine?
