Yes

No

To sort field values in descending order

To return only fields containing five or fewer values

To find the least common values of a field in a dataset

To find the fields with the fewest number of values across a dataset

True

False

False

True

Median(X)

Eval by X

Fields(X)

Values(X)

count stats vendor_action

count stats (vendor_action)

stats count (vendor_action)

stats vendor_action (count)

Returns the least common field values of a given field in the results.

Returns the most common field values of a given field in the results.

Returns the top 10 field values of a given field in the results.

Returns the lowest 10 field values of a given field in the results.

Search & Reporting is the only app that can be set as the default application.

Full names can only be changed by accounts with a Power User or Admin role.

Time zones are automatically updated based on the setting of the computer accessing Splunk.

Full name, time zone, and default app can be defined by clicking the login name in the Splunk bar.

True

False

index=security sourcetype=linux secure (invalid OR failed) | stats count as

" Potential Issues "

index=security sourcetype=linux secure (invalid OR failed) | stats as

" Potential Issues "

index—security sourcetype=linux secure (invalid OR failed) | count stats as

" Potential Issues "

index—security sourcetype=linux secure (invalid OR failed) | count as " Potential Issues "