What is the difference between snapshot and version?

200

---

How splunk works.

230

---

What are the different types of data inputs in splunk?

238

---

Explain replication factor (rf)?

188

---

How data ages in splunk?

197

---

Why should we use splunk alert? What are the different options while setting up alerts?

202

---

Explain file precedence in splunk.

234

---

What is the difference between splunk app and add-on?

688

---

How can we extract fields?

172

---

Give a few use cases of knowledge objects.

211

---

Why can’t I go for something that is open source other than splunk?

180

---

What is a lookup command? Differentiate between inputlookup & outputlookup commands.

250

---

Why should we use splunk alert?

180

---

How to assign colors in a chart based on field names in splunk ui?

199

---

What is the difference between ‘eval’, ‘stats’, ‘charts’ and ‘timecharts’ command?

307

---