Question 1

Which of the following can be used to access external lookups?

Options :

A : Perl and Python

B : Python and Ruby

C : Perl and binary executable

D : Python and binary executable

Answer: D

Question 2

How can the erex and rex commands be used in conjunction to extract fields?

Options :

A :

The regex Generated by the erex command can be edited and used with the regex command in a subsequent search.

B :

The regex generated by the rex command can be edited and used with the erex command in a subsequent search.

C :

The regex generated by the erex command can be edited and used with the erex command in a subsequent search.

D : The erex and rex commands cannot be used in conjunction under any circumstances.

Answer: A

Question 3

Which of the following has a schema or structure embedded in the data itself?

Options :

A : Dark data

B : Unstructured data

C : Embedded data

D : Self-describing data

Answer: D

Question 4

Why is the transaction command slow in large splunk deployments?

Options :

A : It forces the search to run in fast mode.

B : transaction or runs on each Indexer in parallel.

C : It forces all event data to be returned to the search head.

D : transaction runs a hidden eval to format fields.

Answer: C

Question 5

How is regex passed to the makemv command?

Options :

A : makemv be preceded by the erex command.

B : It is specified by the delim argument.

C : It Is specified by the tokenizer argument.

D : Makemv must be preceded by the rex command.

Answer: B