Splunk
SPLK-1001 · Question #61
Which of the following is a Splunk search best practice?
The correct answer is A. Filter as early as possible. See the full explanation below for the reasoning.
Question
Which of the following is a Splunk search best practice?
Options
- AFilter as early as possible.
- BNever specify more than one index.
- CInclude as few search terms as possible.
- DUse wildcards to return more search results.
How the community answered
(18 responses)- A78% (14)
- B6% (1)
- C11% (2)
- D6% (1)
Community Discussion
No community discussion yet for this question.