What is join command and what are various flavours of join command?
What is difference between source & source type?
Which role can create data model?
Which splunk roles can share the same machine?
What happens if License master is unreachable?
Explain the function of alert manager?
Explain the splunk architecture?
What are the types of alerts in splunk?
Who are the biggest direct competitors to splunk?
How data ages in splunk?
What do you mean by splunk indexer?
Explain splunk rest api?
What is lookup command?
Where to create knowledge objects, dashboards, and reports?
Can you write down a general regular expression for extracting ip address from logs?