Splunk interview question

Nda so cannot divulge