SPLK-1001 Exam Dumps

In the Splunk interface, the list of alerts can be filtered based on which characteristics?

A.

App, Owner, Severity, and Type

B.

App, Owner, Priority, and Status

C.

App, Dashboard, Severity, and Type

D.

App, Time Window, Type, and Severity

What happens when a field is added to the Selected Fields list in the fields sidebar'?

A.

Splunk will re-run the search job in Verbose Mode to prioritize the new Selected Fi

B.

Splunk will highlight related fields as a suggestion to add them to the Selected Fields list.

C.

Custom selections will replace the Interesting Fields that Splunk populated into the list at search time

D.

The selected field and its corresponding values will appear underneath the events in the search results

Where does Licensing meter happen?

A. Indexer

B. Parsing

C. Heavy Forwarder

D. Input

The better way of writing search query for index is:

A. index=a index=b

B. (index=a OR index=b)

C. index=(a & b)

D. index = a, b

What is the main requirement for creating visualizations using the Splunk UI?

A.

1. Your search must transform event data into Excel file format first.

B.

Your search must transform event data into XML formatted data first. 

C.

Your search must transform event data into statistical data tables first. 

D.

Your search must transform event data into JSON formatted data first.

Splunk indexes the data on the basis of timestamps

A. True

B. False