What are the three main Splunk components?
When is an alert triggered?
Which search will return the 15 least common field values for the dest_ip field?
What is the default lifetime of every Splunk search job?
In the Fields sidebar, what does the number directly to the right of the field name indicate?