What is the difference between the splunk app framework and splunk sdks?
What is stool or how will you troubleshoot splunk configuration files?
What are the components of splunk?
How are forwarder licenses purchased?
What are most important configuration files of splunk or can you tell name of few important configuration files in splunk?
Explain the function of alert manager?
What are the lookup command and its use case?
What are splunk buckets? Explain the bucket lifecycle?
Explain the output lookup command?
How splunk avoids duplicate indexing of logs?
How splunk helps the enterprise?
What is the difference between splunk app and splunk add on?
What are the components of splunk/splunk architecture?
What is difference between stats vs transaction command?
What is the difference between splunk sdk and splunk framework?