[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsp0lAlH9vyxclAvPfJK8KlEpB62zrVkx2B7s4Kyj3ZM":3},{"answer":4,"createTime":5,"id":6,"options":7,"origin":10,"question":13,"related":14,"source":18,"type":19},[],"2024-12-23 08:09:45",1003684521,[8,9],"对","错",{"courseImg":11,"courseName":12},"https:\u002F\u002Ftihai-oss-cloud.itihey.com\u002Fimg\u002Fcbe757a97807c659916b042dc1993cbd.jpg","大数据处理和分析","&quot;&amp;&quot;运算符可以将分散的文本合并在一起",[15,20,25,30,39,48,53,58,67,76],{"answer":16,"createTime":5,"id":6,"options":17,"question":13,"source":18,"type":19},[],[8,9],"v2",3,{"answer":21,"createTime":5,"id":22,"options":23,"question":24,"source":18,"type":19},[],1003684572,[8,9],"Edate函数返回的是日期的序列数,用Text函数可以将它转换成文本形式的日期",{"answer":26,"createTime":5,"id":27,"options":28,"question":29,"source":18,"type":19},[],1003684596,[8,9],"在页面中输入localhost:8000能够开启Splunk( )",{"answer":31,"createTime":5,"id":32,"options":33,"question":37,"source":18,"type":38},[],1003684599,[34,35,36],"| fields - host, ip","| fields - host, -ip","| fields host, ip","从结果中删除host和ip字段,则需要构造SPL语句( )",0,{"answer":40,"createTime":5,"id":41,"options":42,"question":47,"source":18,"type":38},[],1003684617,[43,44,45,46],"文本文件","excel文件","*.pcapng文件","任意文件","打开Wireshark主界面中的【Open】选项,能够导入( )文件",{"answer":49,"createTime":5,"id":50,"options":51,"question":52,"source":18,"type":19},[],1003684624,[8,9],"填充柄位于单元格的左下角",{"answer":54,"createTime":5,"id":55,"options":56,"question":57,"source":18,"type":19},[],1003684643,[8,9],"对于SPL命令A和B而言,| A | B 与 | B | A的作用是一样的",{"answer":59,"createTime":5,"id":60,"options":61,"question":66,"source":18,"type":38},[],1003684653,[62,63,64,65],"stats","streamstats","eventstats","statistics","在Splunk中获取所有记录的总数是用哪个SPL命令",{"answer":68,"createTime":5,"id":69,"options":70,"question":75,"source":18,"type":38},[],1003684665,[71,72,73,74],"11","21","12","错误值","A1,A2单元格的值分别为True,&quot;9&quot;,公式&quot;=SUM(&quot;11&quot;,A1,A2)&quot;的计算结果为( )",{"answer":77,"createTime":5,"id":78,"options":79,"question":80,"source":18,"type":19},[],1003684669,[8,9],"SPL命令可以不需要管道符"]