SPLK-1001 Exam Dumps

A collection of items containing  things such as data inputs, UI elements,  and knowledge objects is known as what?

 

1.  

A.

An app

B.

JSON

C.

A role

D.

An enhanced solution

You can view the search result in following format (Choose three.):

A. Table

B. Raw

C. Pie Chart

D. List

A field exists in search results, but isn’t being displayed in the fields sidebar. How can it be added to the fields sidebar?

 

1. Click All Fields and select the field to add it to Selected Fields.
2. Click Interesting Fields and select the field to add it to Selected Fields. C. Click Selected Fields and select the field to add it to Interesting Fields.
3. This scenario isn’t possible because all fields returned from a search always appear in the fields sidebar.

 

A.

Click All Fields and select the field to add it to Selected Fields.

 

B.

Click Interesting Fields and select the field to add it to Selected Fields.

C.

C. Click Selected Fields and select the field to add it to Interesting Fields.

 

D.

This scenario isn’t possible because all  fields returned from  a search always appear in the fields sidebar

Splunk index time process can be broken down into __________ phases.

A. 3

B. 2

C. 4

D. 1

Which of the following can be used as wildcard search in Splunk?

A. =

B. >

C. !

D. *

By default, which of the following is a Selected Field?

A. action

B. clientip

C. categoryld

D. sourcetype