Splunk interview question

Drive me though your experience