SPLK-1001 Free Practice Test

Which of the following is a Splunk search best practice?
Splunk Core Certified User

1. A. Filter as early as possible.
2. B. Never specify more than one index.
3. C. Include as few search terms as possible.
4. D. Use wildcards to return more search results.

Correct Answer: A