SPLK-1002 V4

This function of the stats command allows you to identify the number of values a field has.A . maxB . distinct_countC . fieldsD . countView AnswerAnswer: D

The fields sidebar does not show________. (Select all that apply.)A . interesting fieldsB . selected fieldsC . all extracted fieldsView AnswerAnswer: C Explanation: The fields sidebar is a panel that shows the fields that are present in your search results2. The fields sidebar does not show all extracted fields, which...

Which of the following statements describe GET workflow actions?A . GET workflow actions must be configured with POST arguments.B . Configuration of GET workflow actions includes choosing a sourcetype.C . Label names for GET workflow actions must include a field name surrounded by dollar signs.D . GET workflow actions can...

Which of the following data model are included In the Splunk Common Information Model (CIM) add-on? (select all that apply)A . AlertsB . EmailC . DatabaseD . User permissionsView AnswerAnswer: A, B, C Explanation: Reference: https://docs.splunk.com/Documentation/CIM/4.15.0/User/Overview The Splunk Common Information Model (CIM) add-on is a collection of pre-built data models...

In this search, __________ will appear on the y-axis. SEARCH: sourcetype=access_combined status! =200 | chart count over hostA . statusB . hostC . countView AnswerAnswer: C Explanation: In this search, count will appear on the y-axis2. This search uses the chart command to create a chart of the count of...

Which of the following about reports is/are true?A . Reports are knowledge objects.B . Reports can be scheduled.C . Reports can run a script.D . All of the above.View AnswerAnswer: D Explanation: A report is a way to save a search and its results in a format that you can...

What is the relationship between data models and pivots?A . Data models provide the datasets for pivots.B . Pivots and data models have no relationship.C . Pivots and data models are the same thing.D . Pivots provide the datasets for data models.View AnswerAnswer: A Explanation: The relationship between data models...

This is what Splunk uses to categorize the data that is being indexed.A . HostB . SourcetypeC . IndexD . SourceView AnswerAnswer: B

Which of the following searches will return events contains a tag name Privileged?A . Tag= PrivB . Tag= Pri*C . Tag= Priv*D . Tag= PrivilegedView AnswerAnswer: B Explanation: Reference: https://docs.splunk.com/Documentation/PCI/4.1.0/Install/PrivilegedUserActivity A tag is a descriptive label that you can apply to one or more fields or field values in your...

Which is not a comparison operator in SplunkA . <=B . =C . !=D . >E . ?=View AnswerAnswer: E Explanation: A comparison operator is a symbol that compares two values and returns a Boolean result (true or false)2. Splunk supports various comparison operators such as <, >, =, !=,...