Splunk Certified Developer: SPLK-2001

Which of the following options would be the best way to identify processor bottlenecks of a search?

A. Using the REST API.

B. Using the search job inspector.

C. Using the Splunk Monitoring Console.

D. Searching the Splunk logs using index=" internal".

Which of these URLs could be used to construct a REST request to search the employee KV store collection to find records with a rating greater than or equal to 2 and less than 5?

A. `http://localhost:8089/servicesNS/nobody/search/storage/collections/data/employees?query={$and: [{rating:{$gte:2}},{rating:{$lt:5}}]}andoutput_mode-json'

B. `http://localhost:8089/servicesNS/nobody/search/storage/collections/data/employees?query={$and: [{rating:$gte:2}},{rating:{$lt:5}}]}andoutput_mode=json'

C. `http://localhost:8089/servicesNS/nobody/search/storage/collections/data/employees?query={% 22rating%22:{%22$gte%22:2}},{%22$and%22},{%22rating%22:{%22$lt%22:5}}} andoutput_mode=json'

D. `http://localhost:8089/servicesNS/nobody/search/storage/collections/data/employees?query={%22$and %22:[{%22rating%22:{%22$gte%22:2}},{%22rating%22:{%22$lt%22:5}}]} andoutput_mode=json'

Which of the following are valid request arguments for the REST search endpoints? (Select all that apply.)

A. latest_time=rt

B. latest_time=now

C. earliest_time=-5h@h

D. earliest_time=rt_10m@m