Ha! Good one, Michael. If the analyst was feeling particularly mischievous, they might've thrown in a 'makedata' command just to see who would fall for it. But 'makeresults' is definitely the way to go here.
Hmm, 'makeresults' does sound like the way to go. Although, I can't help but wonder if the analyst is really just trying to get us to waste time on this exam. What do you think, Susan?
I agree, 'makeresults' seems like the obvious answer. It's the only option that lets you generate custom data instead of using what's already in Splunk.
The 'makeresults' command looks like the right choice here. It allows you to create your own data for testing, which is exactly what the question is asking for.
Adelaide
6 days agoRoyce
7 days agoGlenn
14 days agoGertude
19 days agoRoslyn
3 days agoAshanti
26 days agoMarcelle
29 days agoAshanti
1 months ago