Q89. Selected fields are a set of configurable fields displayed for each event.

Q90. Which of the following are functions of the stats command?

Q91. Which command will rename action to Customer Action?

Q92. 36. Lookups can be private for a user.

Q93. What is the default lifetime of every Splunk search job?

Q94. How does Splunk determine which fields to extract from data?

Q95. What does the rarecommand do?

Q96. According to Splunk best practices, which placement of the wildcard results in the most efficient search?

Q97. How can results from a specified static lookup file be displayed?

Q98. What happens when a field is added to the Selected Fields list in the fields sidebar?

Q99. What are the three main Splunk components?

Q100. When a Splunk search generates calculated data that appears in the Statistics tab, in what formats can the results be exported?

Q101. Which command automatically returns percent and count columns when executing searches?

Q102. NOT status = 100:

Q103. What is a primary function of a scheduled report?

Q104. Splunk Components:
Which of the following are responsible for parsing incoming data and storing data on disc?

Q105. When sorting on multiple fields with the sort command, what delimiter can be used between the field names in the search?

Q106. When viewing the results of a search, what is an Interesting Field?