Self-assessment
Like other chapters, this section is about self-testing your knowledge of the topics that we have learned about so far. You have 10 questions, and the answers are given after the questions. As reiterated every time, feel free to review the respective sections once again if you have difficulty answering questions. Let’s begin:
- Are field names case-sensitive?
- Yes
- No
- Does Splunk auto-extract fields/values from the key-value format in search time?
- Yes
- No
- Select the types of lookup files available in Splunk (select all that apply):
- JSON lookups
- CSV lookups
- KV Store lookups
- Geospatial lookups
- Which statements are true about CSV lookups? Select all that apply:
- CSV lookups store information in MongoDB
- CSV lookup files have the
.
csv
extension - CSV lookup files are used to enrich information by correlating with existing events in Splunk.
- CSV lookups contain information in comma-separated values with a header
- What are the two types of Splunk Web methods available...