SPLK-1004 無料問題集「Splunk Core Certified Advanced Power User」

（A）TXT files

（B）GPX or GML files

（C）KMZ or KML files

（D）CSV files

（A）To generate an accelerated datamodel.

（B）To generate statistics on indexed fields.

（C）As an alternative to the summary command.

（D）To generate statistics on search-time fields.

（A）Universal forwarder

（B）Master node

（C）Search head

（D）Indexer

（A）[ AND 10 170 178 192 Index::sales ]

（B）[ index::sales AND 469 10 702 390 ]

（C）[ index::sales 192 AND 10 AMD 178 AND 170 ]

（D）[ 192 AND 10 AND 178 AND 170 Index::sales ]

（A）transaction

（B）eventstats

（C）stats

（D）tstats

（A）An argument cannot be used with an outer nested macro.

（B）An argument cannot be used with an inner nested macro.

（C）The argument value must be specified in the outer macro.

（D）The argument value may be passed to the outer macro.

（A）index=summary search_name="Linux logins" | stats count by src_ip user

（B）index=summary search_name="Linux logins" | top src_ip user

（C）index=summary sourcetype="linux_secure" | stats count by src_ip user

（D）index=summary sourcetype="linux_secure" | top src_ip user