Splunk interview question

It was mostly from LC Medium and Hard