[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fjG_iWPABX08__OLTV2X6-HiS9b6JdDb4nEuALIblnYI":3},{"answer":4,"createTime":5,"id":6,"options":7,"origin":10,"question":13,"related":14,"source":20,"type":21},[],"2024-12-23 08:09:45",1003684596,[8,9],"对","错",{"courseImg":11,"courseName":12},"https:\u002F\u002Ftihai-oss-cloud.itihey.com\u002Fimg\u002Fcbe757a97807c659916b042dc1993cbd.jpg","大数据处理和分析","在页面中输入localhost:8000能够开启Splunk( )",[15,22,27,30,39,48,53,58,67,76],{"answer":16,"createTime":5,"id":17,"options":18,"question":19,"source":20,"type":21},[],1003684521,[8,9],"&quot;&amp;&quot;运算符可以将分散的文本合并在一起","v2",3,{"answer":23,"createTime":5,"id":24,"options":25,"question":26,"source":20,"type":21},[],1003684572,[8,9],"Edate函数返回的是日期的序列数,用Text函数可以将它转换成文本形式的日期",{"answer":28,"createTime":5,"id":6,"options":29,"question":13,"source":20,"type":21},[],[8,9],{"answer":31,"createTime":5,"id":32,"options":33,"question":37,"source":20,"type":38},[],1003684599,[34,35,36],"| fields - host, ip","| fields - host, -ip","| fields host, ip","从结果中删除host和ip字段,则需要构造SPL语句( )",0,{"answer":40,"createTime":5,"id":41,"options":42,"question":47,"source":20,"type":38},[],1003684617,[43,44,45,46],"文本文件","excel文件","*.pcapng文件","任意文件","打开Wireshark主界面中的【Open】选项,能够导入( )文件",{"answer":49,"createTime":5,"id":50,"options":51,"question":52,"source":20,"type":21},[],1003684624,[8,9],"填充柄位于单元格的左下角",{"answer":54,"createTime":5,"id":55,"options":56,"question":57,"source":20,"type":21},[],1003684643,[8,9],"对于SPL命令A和B而言,| A | B 与 | B | A的作用是一样的",{"answer":59,"createTime":5,"id":60,"options":61,"question":66,"source":20,"type":38},[],1003684653,[62,63,64,65],"stats","streamstats","eventstats","statistics","在Splunk中获取所有记录的总数是用哪个SPL命令",{"answer":68,"createTime":5,"id":69,"options":70,"question":75,"source":20,"type":38},[],1003684665,[71,72,73,74],"11","21","12","错误值","A1,A2单元格的值分别为True,&quot;9&quot;,公式&quot;=SUM(&quot;11&quot;,A1,A2)&quot;的计算结果为( )",{"answer":77,"createTime":5,"id":78,"options":79,"question":80,"source":20,"type":21},[],1003684669,[8,9],"SPL命令可以不需要管道符"]