Answer / Satyam Chaudhary

In Splunk, there are two main search modes: Search Head (where the search is run on the search head cluster) and Indexer (where the search is run on the indexers).

List out various stages of bucket lifecycle?

1 Answers  

---

What is the main difference between sort + and sort -?

1 Answers  

---

What is stool or how will you troubleshoot splunk configuration files?

1 Answers  

---

What is splunk? Why is splunk used for analyzing machine data?

1 Answers  

---

How does splunk determine 1 day, from a licensing perspective?

1 Answers  

---

How to reset splunk admin password?

1 Answers  

---

What is the function of alert manager?

1 Answers  

---

What is .conf files precedence in splunk?

1 Answers  

---

What are the formats in which search result be exported?

1 Answers  

---

Can you write down a general regular expression for extracting ip address from logs?

1 Answers  

---

What are the types of alerts in splunk?

1 Answers  

---

Explain the output lookup command?

1 Answers  

---