SPLK-1001 Exam Dumps

Which is not a comparison operator in Splunk?

A. <=

B. =

C. !=

D. >

E. ?=

When looking at a statistics table, what is one way to drill down to see the underlying events?

A. Creating a pivot table

B. Clicking on the visualizations tab.

C. Viewing your report in a dashboard.

D. Clicking on any field value in the table.

Select the statements that are true for timeline in Splunk (Choose four.):

A. Timeline shows distribution of events specified in the time range in the form of bars.

B. Single click to see the result for particular time period.

C. You can click and drag across the bar for selecting the range.

D. This is default view and you can't make any changes to it.

E. You can hover your mouse for details like total events, time and date.

Beginning parentheses is automatically highlighted to guide you on the presence of complimenting parentheses.

A. No

B. Yes

Which time range picker configuration would return real-time events for the past 30 seconds?

A.

Preset - Relative: 30-seconds ago

B.

Relative - Earliest: 30-seconds ago, Latest: Now

C.

Real-time - Earliest: 30-seconds ago, Latest: Now

D.

Advanced - Earliest: 30-seconds ago, Latest: Now

Which is the default app for Splunk Enterprise?

A. Splunk Enterprise Security Suite

B. Searching and Reporting

C. Reporting and Searching

D. Splunk apps for Security