Answer / Raj Mishra

Splunk supports two primary search modes: 1. Real-time (streaming) search mode, which processes and displays data as it arrives. 2. Historical search mode, which searches through previously indexed data.

Explain data models and pivot?

1 Answers  

---

Explain types of search modes in splunk?

1 Answers  

---

What is the difference between search time and index time field extractions?

1 Answers  

---

List out some splunk search commands?

1 Answers  

---

Why use only splunk?

1 Answers  

---

How to locate the place where default splunk configuration is stored?

1 Answers  

---

How do we sync and deploy configurational files and updates across multiple deployment servers in a large multi layered clustered?

1 Answers  

---

Distinguish between splunk apps and add-ons?

1 Answers  

---

What is summary index in Splunk?

1 Answers  

---

What is the primary difference between stats and eventstats commands?

1 Answers  

---

Explain splunk components?

1 Answers  

---

What is the difference between Splunk apps and add-ons?

1 Answers  

---