Help With Fundamentals 1 and 2 Questions

[dfurtaw]

Hi guys,

I'm working on studying for the Power user certification and I'm putting together a study guide for myself. I've been studying the PDF as well as a few flashcard study helpers online and I've come across a few questions that I'm a bit unsure of and I wanted to see if I could get a better explanation on them. I've scoured through every bit of the study material and I just can't get a definite answer. Wanted to see if any Splunkers could weigh in and help me out 🙂

I understand that when a search returns statistical values, it can be viewed as a chart (i.e, timechart, chart, stats, etc). One question that I'm unable to find a solid answer to in my PDF and notes is, "When a search returns _________, it can be viewed as a list. The options it gives are A. A list of events B. transactions, C. statistical values.

My gut would say transactions, but it looks like the majority of study guides are saying that it is statistical values. This is confusing to me as I would assume that statistical values would imply a chart, and transactions (events grouped based on a field, etc) would return in a list, grouped by the transaction term. Could I get some extra insight into this? This has been on my mind for quite some time now!

Another question I had that seemed a bit ambiguous was a question I saw was regarding the gauge command. I understand the gauge visualization is chosen when you are picking the type of visual on your panel, the gauge command itself, from my understanding is used to set values based on number ranges. A question I came across while scouring the internet mentions the command and asks it's purpose. The answers you can choose from are that it
creates a single-value visualization,
creates a radial gauge visualization or allows you to set colored ranges for a single-value visualization. I would go with the last answer because I believe that is actually what the command is used for. Could I get an extra opinion on this?

Thank you guys so much. Again - I believe I have done my due dilligence, but these are a couple questions that I'm still a bit on the unsure side with.

-DF

[woodcock]

The CORRECT first answer (not by any means what the test will count as correct) is Events. On the Events tab, just above the i is a style-picker with 3 values: List, Raw, and Table.
You are correct about the other answer.
Not that any of this matters as both are exceedingly unlikely to be on the test.

[richgalloway]

Many of the flashcard sites are worthless and most of the rest are wrong so don't waste your time with them.
All the material you need to pass the certification exam is in the class materials. See the blueprint (https://www.splunk.com/pdfs/training/Splunk-Test-Blueprint-Power-User-v.1.1.pdf) for an outline of what is on the exam.

[dfurtaw]

Got it. Thanks Rich.

[richgalloway]

I undeleted the question so others might benefit from it.