⚡ IT Wisdom
My firewall rejected my social life. Said it violated the default deny policy.
Skilled Practitioner
4249 XP
1751 to Expert
Manage Cards
Add manual cards or delete existing ones
All Cards
319 cards total
AITECH
Agentic AI
20 cards
·
20 basic
· 0 cloze
Basic
20 cards
| What is the key difference between Agentic AI and Generative AI? | claude | |
| What makes a system "autonomous" rather than just a prompt-response tool? | claude | |
| Why is agency better described as a spectrum than a binary label? | claude | |
| Why might forcing autonomy onto a task that doesn't need it (like a scheduled summary email) be... | claude | |
| What is "orchestration" in a multi-agent system? | claude | |
| Why should an agent's tools be narrowly scoped rather than broadly permissioned? | claude | |
| Why does an agent need a retry limit or escalation path instead of retrying forever? | claude | |
| What is the Model Context Protocol (MCP)? | claude | |
| What are the three main MCP primitives? | claude | |
| Why should tool/resource content from an MCP server be treated as untrusted input? | claude | |
| Why might exposing one broad tool (like "run_sql_query") be riskier than several narrow tools? | claude | |
| What is "human-in-the-loop" (HITL)? | claude | |
| What factor should determine whether an agent action needs HITL review? | claude | |
| What is "rubber-stamping" in a HITL context, and why is it a problem? | claude | |
| Why is confidence-based HITL routing only as reliable as the model's confidence calibration? | claude | |
| What is "data mapping" in an AI agent pipeline? | claude | |
| Why is silently dropping unrecognized fields during a mapping step risky? | claude | |
| Why should schema/type validation happen after a data transformation step? | claude | |
| Why is logging both the original and transformed value useful in a mapping pipeline? | claude | |
| Why might isolating failing records (dead-letter handling) be better than failing an entire batch? | claude |
Data Research and Analysis
10 cards
·
10 basic
· 0 cloze
Basic
10 cards
| What is exploratory data analysis (EDA)? | claude | |
| How does generative AI assist with EDA? | claude | |
| Why must an analyst still verify AI-generated EDA conclusions? | claude | |
| What are common automated data preparation tasks? | claude | |
| What is the risk of silently imputing missing values (e.g., filling with the column average)? | claude | |
| What is re-identification risk? | claude | |
| What control reduces sensitive data exposure when using AI for analysis? | claude | |
| Why does "correlation does not imply causation" matter for AI-assisted data analysis? | claude | |
| How can AI assist with research ideation? | claude | |
| What is "hallucination" in the context of AI-assisted research drafting? | claude |
Development and Workflow Automation
20 cards
·
20 basic
· 0 cloze
Basic
20 cards
| How does AI assist across the SDLC? | claude | |
| Why should AI-generated code always be reviewed before merging? | claude | |
| What is the main value of AI-assisted rapid prototyping? | claude | |
| Why is a polished AI-generated prototype risky if shipped directly to production? | claude | |
| What should you validate between steps in a multi-step AI workflow? | claude | |
| Why does an AI-powered workflow need ongoing monitoring, not just a pre-launch test? | claude | |
| How can a workflow balance human-in-the-loop safety with speed? | claude | |
| Why does sending unnecessary context in every AI prompt matter during prototyping? | claude | |
| What happens if a request exceeds a model's context window? | claude | |
| What is the risk of an AI assistant adding overly broad error handling (e.g., a bare except: pass)? | claude | |
| How can AI help with code documentation, and what's the catch? | claude | |
| Why is acceptance count (suggestions accepted) a flawed metric for AI-assisted code quality? | claude | |
| Why might an AI coding assistant suggest deprecated or outdated code patterns? | claude | |
| What is a key auditability practice for using AI throughout a regulated SDLC? | claude | |
| Why is reviewing AI auto-fixes (like lint fixes) important even for "minor" changes? | claude | |
| What false-positive risk comes with AI-augmented static analysis tools? | claude | |
| When does building a retrieval step (instead of sending full documents) become worth the added... | claude | |
| What is the tradeoff when trimming context to reduce token cost? | claude | |
| Why is using only velocity metrics (lines of code, PRs/week) risky when measuring AI's impact on... | claude | |
| What systemic risk arises when AI generates requirements, code, and tests with minimal human checkpoints? | claude |
Ethics and Security
10 cards
·
10 basic
· 0 cloze
Basic
10 cards
| What are the core responsible AI principles? | claude | |
| What is bias mitigation in AI? | claude | |
| What does accountability mean in responsible AI? | claude | |
| How can an organization protect data privacy when using a third-party AI model? | claude | |
| What is direct prompt injection? | claude | |
| What is indirect prompt injection? | claude | |
| Why is AI-generated misinformation considered especially dangerous? | claude | |
| What is AI governance? | claude | |
| What is an AI risk assessment? | claude | |
| Why does AI risk management need to be continuous, not just a pre-deployment step? | claude |
Generative AI Models
10 cards
·
10 basic
· 0 cloze
Basic
10 cards
| What is a Large Language Model (LLM)? | claude | |
| What is a diffusion model? | claude | |
| What is the main trade-off between cloud-hosted and locally-hosted AI models? | claude | |
| What is a context window? | claude | |
| What is a token in generative AI? | claude | |
| What should you check on a model hub before selecting a model for a task? | claude | |
| What does "multimodal" mean for a generative AI model? | claude | |
| What is Retrieval Augmented Generation (RAG)? | claude | |
| What is an embedding? | claude | |
| Why are vector databases used with RAG? | claude |
Prompt Engineering
10 cards
·
10 basic
· 0 cloze
Basic
10 cards
| What are the three core elements of a well-structured prompt? | claude | |
| What is few-shot prompting? | claude | |
| What is chained (sequential/iterative) prompting? | claude | |
| What is a prompt injection attack? | claude | |
| Direct vs. indirect prompt injection — what's the difference? | claude | |
| Why are agentic AI systems more exposed to prompt injection risk than a simple chatbot? | claude | |
| What is a hallucination in generative AI? | claude | |
| Name a basic defense against prompt injection from untrusted content. | claude | |
| How does RAG help mitigate hallucinations? | claude | |
| Why combine input/instruction separation with human-in-the-loop approval for an AI agent? | claude |
DEVASC
Application Deployment and Security
4 cards
·
4 basic
· 0 cloze
Basic
4 cards
| What is a container image and how does it relate to application deployment? | claude | |
| What is the OWASP Top 10 and why is it relevant to developers? | claude | |
| What is TLS and why is it important in securing application communications? | claude | |
| What is the purpose of a secrets management tool (e.g., HashiCorp Vault) in application deployment? | claude |
Cisco Platforms and Development
10 cards
·
10 basic
· 0 cloze
Basic
10 cards
| What is Cisco DNA Center used for in a network environment? | claude | |
| What type of API does Cisco DNA Center expose for programmatic access? | claude | |
| What is Cisco Meraki and how is it primarily managed? | claude | |
| What is the purpose of the Cisco Meraki API key and where is it passed in API requests? | claude | |
| What is Cisco ACI and what is its primary programmability interface? | claude | |
| What is Cisco SD-WAN (Viptela) and which component provides its REST API? | claude | |
| What is Cisco Webex and what capabilities does its REST API provide? | claude | |
| What is a Webex Bot and how does it receive messages from users? | claude | |
| What is Cisco IOS XE RESTCONF and what data modeling language does it rely on? | claude | |
| What is the difference between NETCONF and RESTCONF on Cisco IOS XE devices? | claude |
Infrastructure and Automation
10 cards
·
10 basic
· 0 cloze
Basic
10 cards
| What is Infrastructure as Code (IaC)? | claude | |
| What is the difference between mutable and immutable infrastructure? | claude | |
| What is Ansible and how does it differ from Puppet or Chef? | claude | |
| What is a CI/CD pipeline and why is it important in network automation? | claude | |
| What is the purpose of a Python virtual environment in automation projects? | claude | |
| What is Terraform and what language does it use for configuration? | claude | |
| What is the role of a Docker container in application deployment automation? | claude | |
| What is configuration drift and how is it addressed? | claude | |
| What is the difference between declarative and imperative approaches to automation? | claude | |
| What is a webhook and how is it used in automation workflows? | claude |
Network Fundamentals
10 cards
·
10 basic
· 0 cloze
Basic
10 cards
| What is the difference between TCP and UDP? | claude | |
| What are the seven layers of the OSI model, in order? | claude | |
| What is the purpose of a subnet mask? | claude | |
| What is the function of ARP (Address Resolution Protocol)? | claude | |
| What is the difference between a hub, a switch, and a router? | claude | |
| What is CIDR notation, and how is /26 interpreted? | claude | |
| What is the role of DNS in networking? | claude | |
| What is Network Address Translation (NAT) and why is it used? | claude | |
| What is the purpose of VLAN (Virtual Local Area Network)? | claude | |
| What are the well-known port numbers for HTTP, HTTPS, SSH, and Telnet? | claude |
Software Development and Design
10 cards
·
10 basic
· 0 cloze
Basic
10 cards
| What is the difference between REST and SOAP APIs? | claude | |
| What does the HTTP status code 401 indicate, and how does it differ from 403? | claude | |
| What is the purpose of a webhook? | claude | |
| What are the four main HTTP methods used in RESTful APIs and their purposes? | claude | |
| What is the difference between synchronous and asynchronous API calls? | claude | |
| What is version control, and why is it used in software development? | claude | |
| What is the Model-View-Controller (MVC) design pattern? | claude | |
| What is the purpose of JSON and how does it differ from XML? | claude | |
| What is Continuous Integration/Continuous Deployment (CI/CD)? | claude | |
| What is the difference between unit testing and integration testing? | claude |
Understanding and Using APIs
10 cards
·
10 basic
· 0 cloze
Basic
10 cards
| What is the difference between a synchronous and asynchronous API call? | claude | |
| What HTTP status code indicates a resource was successfully created via a POST request? | claude | |
| What is the purpose of an API key? | claude | |
| What distinguishes a RESTful API from a SOAP API? | claude | |
| What is pagination in the context of REST APIs? | claude | |
| What is the role of the HTTP OPTIONS method in REST APIs? | claude | |
| What is OAuth 2.0 and how is it used with APIs? | claude | |
| What is the purpose of rate limiting in an API? | claude | |
| What is the difference between a REST API resource and an endpoint? | claude | |
| What does idempotent mean in the context of HTTP methods, and which methods are idempotent? | claude |
EPT1
Field Testing
12 cards
·
12 basic
· 0 cloze
Basic
12 cards
| What are the three terminals of a megohmmeter and what does each connect to? | claude | |
| Why must a multimeter be connected in series to measure current, but in parallel to measure voltage? | claude | |
| In a 4-terminal Kelvin connection on a DLRO, where must the potential (P1/P2) contacts be placed... | claude | |
| What is the correct physical sequence for a live-dead-live verification with a voltage detector? | claude | |
| What must physically happen to a test object's terminals immediately after a hipot test and... | claude | |
| Which transformer winding do the H leads and X leads connect to on a TTR test set, and what does... | claude | |
| How does a relay test set physically detect relay trip timing, and why must its monitoring leads... | claude | |
| In the fall-of-potential method, where is the potential stake placed, and what does the... | claude | |
| How does a disk-type phase rotation meter physically indicate phase sequence, and what must be... | claude | |
| How are a capacitance meter's leads physically connected, and what must be done to a capacitor... | claude | |
| What standard governs calibration of field test instruments, and what minimum Test Uncertainty... | claude | |
| Per ASTM F496, what are the maximum retest intervals for rubber insulating gloves vs. sleeves,... | claude |
Management and Planning
8 cards
·
8 basic
· 0 cloze
Basic
8 cards
| What are the four electrical quantities specified in the NICET Management and Planning content... | claude | |
| What does the prefix 'kilo' (k) mean, and give an electrical example? | claude | |
| What does the prefix 'mega' (M) mean, and give an electrical example? | claude | |
| What does the prefix 'milli' (m) mean, and give an electrical example? | claude | |
| What does the prefix 'micro' (μ) mean, and give an electrical example? | claude | |
| State Ohm's Law and the three derived formulas. | claude | |
| What does the NICET Code of Ethics require when a Level I technician's supervisor directs them... | claude | |
| What is the difference between a primary injection test and a secondary injection test? | claude |
Safety
56 cards
·
56 basic
· 0 cloze
Basic
56 cards
| What are the five fire classes (A/B/C/D/K) and what material does each cover? | claude | |
| Which extinguisher agents work on which fire classes? | claude | |
| What is the PASS technique for using a portable fire extinguisher? | claude | |
| Per OSHA 1910.157, what are the maximum travel distances to extinguishers for Class A and Class... | claude | |
| How often must a portable fire extinguisher be formally inspected, and what does the monthly... | claude | |
| Why is CO2 dangerous in a confined space, and why is it the preferred agent for energized electronics? | claude | |
| Under what conditions should you NOT attempt to fight a fire with a portable extinguisher? | claude | |
| Why must you confirm the extinguisher's class label before use, and what happens if you use the... | claude | |
| What federal agencies establish safety vs. environmental regulations relevant to an EPT1... | claude | |
| What are the four ANSI Z535.4 signal words, their header colors, and what each means? | claude | |
| What does NFPA 70E cover, and how does it relate to OSHA 29 CFR 1910.331-335? | claude | |
| What are the four quadrants of the NFPA 704 hazard diamond and what does each color represent? | claude | |
| What information must appear on an arc flash placard per NFPA 70E, and which SDS section tells... | claude | |
| What are the 16 GHS SDS sections, and which sections are most immediately actionable during an emergency? | claude | |
| Under OSHA 1910.1200 HazCom, when must SDS be accessible, and what must you do with an unlabeled... | claude | |
| What does OSHA 29 CFR 1910.145 cover, and what is the key restriction on accident prevention tags? | claude | |
| AHA adult CPR: compression rate, depth, and ratio? | claude | |
| AHA two-rescuer child CPR ratio vs. one-rescuer child — and infant CPR depth? | claude | |
| AED: minimum pad clearance from an implanted pacemaker/ICD? | claude | |
| Red Cross: chemical eye flush duration? Why not neutralize? | claude | |
| Red Cross: burn cooling duration, and what is prohibited? | claude | |
| Red Cross: tourniquet placement distance? Shock leg elevation? | claude | |
| Red Cross heat stroke threshold and choking sequence? | claude | |
| AHA: breathing check time limit? Unwitnessed child collapse — CPR first or call 911 first? | claude | |
| What are the three hard hat classes and their voltage ratings? (ANSI Z89.1 via OSHA 1910.135) | claude | |
| What are the maximum use voltages for rubber insulating glove Classes 00 through 2? (OSHA... | claude | |
| What are the maximum use voltages for rubber insulating glove Classes 3 and 4? (OSHA 1910.137 Table I-1) | claude | |
| What are the in-service maintenance requirements for rubber insulating gloves under ASTM F496? | claude | |
| What are OSHA's noise exposure limits and hearing conservation thresholds? (OSHA 1910.95 / 1926.101) | claude | |
| What is the OSHA noise dose formula and when is a combined shift exposure a violation? | claude | |
| What are the four NFPA 70E arc flash PPE categories and their minimum arc ratings? | claude | |
| What are the retirement rules for body harnesses and hard hats? | claude | |
| What are the ANSI/ASC A14 duty ratings for ladder types III, II, I, IA, and IAA? | claude | |
| What are the OSHA 1926.1053 requirements for portable ladder rung spacing and side-rail... | claude | |
| What is the OSHA 1926.1053 pitch rule for non-self-supporting portable ladders? | claude | |
| What safety factor does OSHA 1926.1053 require for portable ladders, and is there an exception? | claude | |
| What does OSHA 1910.27 require for fixed ladders that extend 20 feet or more above a lower level? | claude | |
| What are the OSHA 1926.451 scaffold requirements for load capacity, fall protection, and inspection? | claude | |
| What are the key OSHA 1926 Subpart M thresholds for personal fall arrest systems? | claude | |
| What are the ANSI/ASC A14 maximum lengths for portable single and extension ladders? | claude | |
| What are the three criteria that define a "confined space" under OSHA 1910.146? | claude | |
| What four characteristics make a confined space "permit-required" under OSHA 1910.146? | claude | |
| What are the atmospheric hazard thresholds for oxygen deficiency, oxygen enrichment, and... | claude | |
| What are the three personnel roles under OSHA 1910.146 confined space entry, and what does each... | claude | |
| Under OSHA 1910.146, what must an attendant do if conditions inside the permit space become... | claude | |
| What key items must an OSHA 1910.146 entry permit include? | claude | |
| Under OSHA 1910.146, what is required to reclassify a permit-required confined space as a... | claude | |
| Under OSHA 1910.146, what is the required retrieval system configuration for permit-required... | claude | |
| What are the six steps of the LOTO procedure under OSHA 1910.147(d) — in order? | claude | |
| Under OSHA 1910.147, when may tagout only be used instead of lockout? | claude | |
| Under OSHA 1910.147, who may remove a lockout or tagout device? | claude | |
| Under OSHA 1910.147, how often must energy control procedures be inspected, and who performs the... | claude | |
| Name the seven types of hazardous energy controlled by OSHA 1910.147 LOTO procedures. | claude | |
| Under OSHA 1910.147, what is the difference between a lockout device and a tagout device? | claude | |
| Under OSHA 1910.147, what must happen before energy is restored after maintenance... | claude | |
| Under OSHA 1910.147, what four items must the annual LOTO inspection certification include? | claude |
SAA-C03)
Design Cost-Optimized Architectures
10 cards
·
5 basic
· 5 cloze
Basic
5 cards
| What is the primary cost advantage of using Amazon S3 Intelligent-Tiering for storage? | claude | |
| When should you use Spot Instances instead of On-Demand Instances to reduce EC2 costs? | claude | |
| What is the cost benefit of using an Amazon RDS Reserved Instance compared to an On-Demand RDS instance? | claude | |
| How does using Amazon CloudFront help reduce costs associated with serving content from an... | claude | |
| What is rightsizing in the context of AWS cost optimization, and which service provides... | claude |
Cloze
5 cards
| AWS {{c1::Savings Plans}} offer up to 72% savings compared to On-Demand pricing in exchange for... | claude | |
| To reduce data transfer costs, you should use an {{c1::S3 Transfer Acceleration}} endpoint only... | claude | |
| AWS {{c1::Cost Explorer}} is a tool that enables you to visualize, understand, and manage your... | claude | |
| An {{c1::S3 Lifecycle}} policy can automatically transition objects to cheaper storage classes... | claude | |
| Using {{c1::AWS Lambda}} instead of always-on EC2 instances for infrequent or event-driven... | claude |
Design High-Performing Architectures
10 cards
·
5 basic
· 5 cloze
Basic
5 cards
| What is the primary benefit of using Amazon ElastiCache in front of an RDS database? | claude | |
| When should you choose Provisioned IOPS SSD (io1/io2) over General Purpose SSD (gp3) for an EBS volume? | claude | |
| What is the difference between horizontal scaling and vertical scaling in AWS architectures? | claude | |
| How does Amazon CloudFront improve the performance of a globally distributed web application? | claude | |
| What is the purpose of Amazon SQS in a high-performing architecture? | claude |
Cloze
5 cards
| Amazon S3 {{c1::Transfer Acceleration}} uses CloudFront edge locations to speed up uploads to S3... | claude | |
| An Application Load Balancer operates at Layer {{c1::7}} of the OSI model, enabling... | claude | |
| Amazon {{c1::Aurora}} is a MySQL and PostgreSQL-compatible relational database that delivers up... | claude | |
| AWS {{c1::Global Accelerator}} improves availability and performance by routing user traffic... | claude | |
| Amazon DynamoDB {{c1::DAX}} is an in-memory cache that provides microsecond read latency for... | claude |
Design Resilient Architectures
10 cards
·
5 basic
· 5 cloze
Basic
5 cards
| What is the difference between RTO and RPO in disaster recovery planning? | claude | |
| What is the purpose of an Amazon S3 Cross-Region Replication (CRR) rule? | claude | |
| What is the Pilot Light disaster recovery strategy in AWS? | claude | |
| How does Amazon Route 53 health checking contribute to a resilient architecture? | claude | |
| What is the purpose of using multiple Availability Zones when designing a resilient AWS architecture? | claude |
Cloze
5 cards
| An Amazon RDS deployment that automatically creates a standby replica in a second Availability... | claude | |
| AWS {{c1::Elastic Load Balancing}} distributes incoming application traffic across multiple... | claude | |
| An Auto Scaling group uses a {{c1::launch template}} to define the instance configuration,... | claude | |
| The AWS disaster recovery strategy with the lowest RTO and RPO, which keeps a fully operational... | claude | |
| Amazon SQS can be used to {{c1::decouple}} application components so that a failure in one... | claude |
Design Secure Architectures
10 cards
·
5 basic
· 5 cloze
Basic
5 cards
| What is the purpose of AWS IAM roles compared to IAM users? | claude | |
| What is the difference between a Security Group and a Network ACL in AWS? | claude | |
| What is the principle of least privilege and how is it applied in AWS? | claude | |
| How does AWS Secrets Manager differ from AWS Systems Manager Parameter Store for storing sensitive data? | claude | |
| What is AWS CloudTrail and why is it important for security? | claude |
Cloze
5 cards
| To enforce that all objects uploaded to an S3 bucket are encrypted at rest, you should use an S3... | claude | |
| AWS {{c1::Macie}} is a fully managed data security service that uses machine learning to... | claude | |
| AWS {{c1::Shield Advanced}} provides enhanced DDoS protection, including 24/7 access to the AWS... | claude | |
| In a VPC, a {{c1::NAT Gateway}} allows instances in a private subnet to initiate outbound... | claude | |
| AWS {{c1::GuardDuty}} is a threat detection service that continuously monitors for malicious... | claude |
SPLUNK-CORE
Alerts
10 cards
·
10 basic
· 0 cloze
Basic
10 cards
| What are the two types of alert scheduling in Splunk? | claude | |
| What is a throttle in the context of Splunk alerts? | claude | |
| What permission level is required to create a scheduled alert in Splunk? | claude | |
| What is the difference between "Per-Result" and "Number of Results" alert trigger conditions? | claude | |
| What alert action in Splunk adds triggered alert information to a shared, reviewable list... | claude | |
| What is the purpose of the "Expires" setting on a Splunk alert? | claude | |
| What trigger condition should be used to fire an alert when the number of results in a time... | claude | |
| What Splunk alert action can be used to automatically create a ticket or send a notification to... | claude | |
| Where in Splunk can you view all alerts that have fired within the configured expiration window? | claude | |
| What is the significance of alert severity levels in Splunk? | claude |
Basic Searching
10 cards
·
10 basic
· 0 cloze
Basic
10 cards
| What is the default time range used when performing a search in Splunk if no time range is specified? | claude | |
| What does the `index` keyword do in a Splunk search? | claude | |
| What is the difference between a `AND`, `OR`, and `NOT` Boolean operator in Splunk searches? | claude | |
| What are the three main components of the Splunk Search Processing Language (SPL) pipeline? | claude | |
| What does the wildcard character `*` do in a Splunk search string? | claude | |
| What is the purpose of field-value pair searching in Splunk? | claude | |
| What is the role of the `sourcetype` field in a Splunk search? | claude | |
| What does the `stats count` command do in a Splunk search? | claude | |
| What is the difference between a "transforming command" and a "streaming command" in Splunk? | claude | |
| How does Splunk's search use "keywords" to find events, and where does it look? | claude |
Reports and Dashboards
10 cards
·
10 basic
· 0 cloze
Basic
10 cards
| What is the difference between a Report and a Dashboard in Splunk? | claude | |
| What acceleration option is available for Reports in Splunk? | claude | |
| How can a Report be shared with other Splunk users? | claude | |
| What are the three time range options when scheduling a Report in Splunk? | claude | |
| What is a Dashboard Panel in Splunk? | claude | |
| What is the purpose of Dashboard Inputs (tokens) in Splunk? | claude | |
| What file format underlies a Classic Splunk Dashboard, and where is it stored? | claude | |
| What scheduling action can be triggered automatically when a scheduled Report runs in Splunk? | claude | |
| What is the difference between "Powered by Report" and "Inline Search" panels in a Splunk Dashboard? | claude | |
| What Splunk feature allows a Dashboard to automatically refresh its data at a set interval? | claude |
Search Language Fundamentals
10 cards
·
10 basic
· 0 cloze
Basic
10 cards
| What is the default time range used when no time picker selection is made in a Splunk search? | claude | |
| What is the purpose of the `stats` command in SPL? | claude | |
| What is the difference between a transforming command and a non-transforming command in Splunk? | claude | |
| What does the `eval` command do in SPL? | claude | |
| What is the function of the pipe (`|`) character in a Splunk search? | claude | |
| What is the role of Boolean operators in a Splunk search, and what is their order of precedence? | claude | |
| What is the `table` command used for in SPL? | claude | |
| What is the difference between the `search` command and the `where` command in SPL? | claude | |
| What does a field extraction using the `rex` command accomplish in SPL? | claude | |
| What is the purpose of the `dedup` command in SPL? | claude |
Splunk Basics
10 cards
·
10 basic
· 0 cloze
Basic
10 cards
| What is a Splunk index? | claude | |
| What are the three main processing components of the Splunk architecture? | claude | |
| What is the default field that Splunk automatically assigns to every indexed event? | claude | |
| What is a sourcetype in Splunk? | claude | |
| What is the role of a Universal Forwarder in Splunk? | claude | |
| What is the Splunk Search Processing Language (SPL)? | claude | |
| What are transforming commands in Splunk, and why are they important? | claude | |
| What is the difference between a scheduled report and an alert in Splunk? | claude | |
| What is the purpose of field extraction in Splunk? | claude | |
| What are the four types of Splunk knowledge objects? | claude |
Using Fields
9 cards
·
9 basic
· 0 cloze
Basic
9 cards
| What does the `fields` command do in a Splunk search, and what are its two modes? | claude | |
| What is field extraction in Splunk and when does it occur? | claude | |
| What is the purpose of the `field.conf` file in Splunk? | claude | |
| How does Splunk handle field names that differ only in case (e.g., "Status" vs. "status")? | claude | |
| What is the `rex` command used for in Splunk? | claude | |
| What does the `rename` command do in Splunk? | claude | |
| What is a multi-value field in Splunk and how can you create one? | claude | |
| What is the Fields sidebar in Splunk and what does it display? | claude | |
| What is the purpose of the `eval` command when used with fields in Splunk? | claude |
Working with Events
10 cards
·
10 basic
· 0 cloze
Basic
10 cards
| What is an event in Splunk? | claude | |
| What does the `fields` command do when used with a minus sign (e.g., `fields - fieldname`)? | claude | |
| What is event segmentation in Splunk, and why does it matter? | claude | |
| What is the purpose of the `table` command in Splunk? | claude | |
| How does the `rename` command affect fields in Splunk search results? | claude | |
| What is the difference between a raw event and a field-value pair in Splunk? | claude | |
| What does the `dedup` command do in a Splunk search? | claude | |
| What is the role of the `sort` command in Splunk, and what is the default sort order? | claude | |
| What does `eval` do when used to create a new field in Splunk? | claude | |
| What is the significance of the selected time range when working with events in Splunk? | claude |
Add Card