Why use only splunk?
What are the components of splunk/splunk architecture?
How can we extract fields?
Explain the splunk architecture?
What is slp?
What is the difference between stats and timechart command?
Name commands which are included in the reporting results category?
Where does splunk default configuration is stored?
How are forwarder licenses purchased?
What is splunk app? What is the difference between splunk app and add-on?
What is splunk indexer and explain its stages?
How to turn down a peer without affecting any other peer of cluster?
What would you use to edit contents of the file in Linux? Describe some of the important commands mode in vi editor?
Explain splunk sdks?
Who are the competitors of Splunk in the market? Why is Splunk efficient?