Which of the following is a Splunk search best practice?

Posted by: Pdfprep Category: SPLK-1001 Tags: , ,

Which of the following is a Splunk search best practice?
A . Filter as early as possible.
B . Never specify more than one index.
C . Include as few search terms as possible.
D . Use wildcards to return more search results.

Answer: A

Leave a Reply

Your email address will not be published.