What would you use to view contents of a large file? How to copy/remove file? How to look for help on a Linux?
What happens if the license master is unreachable?
What is time zone property in splunk?
What is the difference between splunk sdk and splunk framework?
Explain different types of data inputs in splunk?
What is splunk db connect?
Why Splunk is used for analysing machine data?
How to use btool for splunk conf file approach?
What is a lookup command? Differentiate between inputlookup & outputlookup commands.
What is the importance of license master in splunk?
Briefly explain the splunk architecture?
What is fishbucket or what is fishbucket index?
How can you troubleshoot splunk performance issues?
Explain how data ages in splunk?
Explain the difference between search head pooling and search head clustering?