Introduction to Splunk

What does Splunk do?

• Search data

• Analyze data

• Visualize data

• All of the above

It triggers when search results meet specific conditions.

• Reports

• Events

• Alerts

• Dashboards

It stores the data and transform it into easy-to-read events.

• Forwarders

• Indexers

• Search Head

• None of the above

 A repository for Splunk data.

• Buckets

• Events

• Index

• Disk

What is the second phase in Data Life Cycle?

• Indexing

• Parsing

• Input

• Searching

 Once the events reach its age or volume, it then goes to the _________ buckets.

• Frozen

• Hot

• Warm

• Cold

This role allows you to manage users, objects, and configurations among other things.

• Admin

• Power User

• User

• None of the above

What does SPL means?

• Searching Process Language

• Search Processing Language

• Stored Procedure Language

• Stored Process Language

It consists of one or more panels displaying data visually in a useful way.

• Table

• Panel

• Dashboard

• Visualization

We cannot just access the data from indexers, we need to have ____________.

• Search Heads

• Index

• Forwarders

• Indexer