Splunk Power User Practice Questions - Splunk Core Certified Power User Exam

Which search produces a line chart of failed logins per hour by host?

index=auth action=failure | chart count over host by _time index=auth action=failure | stats count by _time host index=auth action=failure | timechart span=1h count by host index=auth action=failure | table _time host count

Correct Answer:

index=auth action=failure | timechart span=1h count by host

Access more questions from this quiz

Continue to Splunk Power User Practice Questions - Splunk Core Certified Power User Exam for more practice questions and the full quiz experience.

Access More Questions