Introducing Splunk

Question 1

What are Splunk apps (1)

Answer 1

Collection of files containing data inputs, UI elements, knowledge objects

Question 2

What are Splunk apps (2)

Answer 2

Apps allow different workspaces for specific use cases or user roles to co-exist on same Splunk server

Question 3

Search and reporting app

Answer 3

Default interface for searching and analyzing data
Allows user to create knowledge objects, reports, dashboards

Question 4

Host

Answer 4

Unique identifier where events originated (host name, ip, etc)

Question 5

Source

Answer 5

Name of stream, file or other input

Question 6

Sourcetype

Answer 6

Specific data type or data format. Parser to parse known log format