All I Want for Christmas is a Support
Resolution
Tis the Season for Technical Questions!
Walking in a Splunk Platform Wonderland
Deck the Halls with Customer Success
Rockin’ Around the UEM Model Tree
100

A Splunk search that only returns error events might be compared to this holiday character who only brings the bad news.

Who is the Grinch?

100

This is the primary purpose of Splunk, enabling organizations to make sense of machine-generated data.

What is collecting, indexing, and analyzing machine-generated data?

100

Types of search modes supported in Splunk

What is Fast Mode, Smart Mode, and Verbose Mode?

100

Customers on the Standard Success Plan receive this many Education Training Units.

What is 700?

100

The number of pillars or partnership areas.

What is three?

200

The ticket priority you hope all customers choose during the holiday break.

What is P4 priority?

200

Splunk uses this query language to search, filter, and analyze data.

What is Search Processing Language (SPL)?

200

Type of Splunk Cloud deployment that supports self-service app installation

What is Victoria Experience?

200

This Splunk platform offers on-demand training and certifications to help customers deepen their knowledge of Splunk.

What is STEP?

200

This persona is responsible for the adoption of new customer use cases.

Who is the Solutions Architect (formerly SE)?

300

Daily Double!!!

When a user says, “All my data is gone,” this is usually set incorrectly.

What is the index in the search?

300

This Splunk component is responsible for storing and managing indexed data.

What is the indexer?

300

The amount of time that data restored from DDAA is searchable

What is 30 days?

300

This is the primary online portal where customers can find documentation, guides, and resources for using Splunk products.

What is Splunk Documentation?

300

This is a collaborative process to account for and mitigate risk.

What is Unified Risk Management (URM)?

400

The Support name for a P1 ticket opened because dashboard colors “aren’t festive enough.”

What is “Not a real P1”?

400

This type of Splunk component forwards data from remote sources to Splunk indexers.

What is a Splunk forwarder?

400

Daily Double!!

The size of uncompressed data that is indexed on a daily basis in Splunk Cloud is used to help customers define which part of the Splunk architecture?


What is storage?

400

Premium Success customers receive this many OnDemand credits to enhance their Splunk experience.

What is 30?

400

Tasks required in support of a customers business objectives are contained in this plan

What is a Success Plan?

500

The tool Support relies on when the customer confidently states, “There’s nothing wrong with our network.”

What is SPLUNK INTERNAL LOGS?

500

In SPL, these two commands can be used to filter results based on specific conditions.

What are the where and search commands?

500

This model helps quantify the business benefits and cost differentiation for choosing between different Splunk deployment options (e.g. on-prem, BYOL, SaaS)?

What is the Total Cost of Ownership or TCO Model?

500

This is the name of Splunk's online community where customers can connect with peers, share best practices, and get help from experts.

What is Splunk Community or Splunk Answers?

500

Risks can be identified by this group.

Who is everyone?

M
e
n
u