Define search head clustering?
What are the types of search modes supported in splunk?
Explain splunk sdks?
What do you mean by roles based access control?
What is a lookup command? Differentiate between inputlookup & outputlookup commands.
What is the main difference between sort + and sort -?
Where to download splunk cloud?
How to troubleshoot splunk performance issues?
Explain Trouble shooting Splunk errors in splunk?
What is the difference between splunk app and add-on?
What are types of field extraction. How to mask a data in either of case?
What is the difference between search time and index time field extractions?
Explain how data ages in splunk?
What is sos?
How does splunk determine 1 day, from a licensing perspective?