Which of the following statements define a namespace?A . The namespace is a combination of the user and the app.B . The namespace is a combination of the user, the app, and the role.C . The namespace is a combination of the user, the app, the role, and the sharing level.D . The namespace...
Which of the following options would be the best way to identify processor bottlenecks of a search?
Which of the following options would be the best way to identify processor bottlenecks of a search?A . Using the REST APC . Using the search job inspector.D . Using the Splunk Monitoring Console.E . Searching the Splunk logs using index=“ internal”. View Answer Answer: C...
Which statements are true regarding HEC (HTTP Event Collector) tokens? (Select all that apply.)
Which statements are true regarding HEC (HTTP Event Collector) tokens? (Select all that apply.)A . Multiple tokens can be created for use with different sourcetypes and indexes.B . The edit token http admin role capability is required to create a token.C . To create a token, send a POST request to services/collector endpoint.D ....
What must be done when calling the serviceNS endpoint?
What must be done when calling the serviceNS endpoint?A . Authenticate with an admin user.B . Specify the user and app context in the URD . Authenticate with the user of the required context.E . Pass the user and app context in the request payload. View Answer Answer: B Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/8.1.2/RESTUM/RESTusing...
Using Splunk Web to modify config settings for a shared object, a revised config file with those changes is placed in which directory?
Using Splunk Web to modify config settings for a shared object, a revised config file with those changes is placed in which directory?A . $SPLUNK_HOME/etc/apps/myApp/localB . $SPLUNK_HOME/etc/system/default/C . $SPLUNK_HOME/etc/system/localD . $SPLUNK_HOME/etc/apps/myApp/default View Answer Answer: A Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/8.1.2/Admin/Howtoeditaconfigurationfile...
Which of the following is a valid dynamic drilldown element to allow a user of the dashboard to visit the hyperlinks contained in the link field?
Suppose the following query in a Simple XML dashboard returns a table including hyperlinks: <search> <query>index news sourcetype web_proxy | table sourcetype title link </query> </search> Which of the following is a valid dynamic drilldown element to allow a user of the dashboard to visit the hyperlinks contained in the link field?A . <option...
Which of the following are characteristics of an add-on? (Select all that apply.)
Which of the following are characteristics of an add-on? (Select all that apply.)A . Requires navigation file.B . Occupies a unique namespace within Splunk.C . Can depend on add-ons for correct operation.D . Contains technology or components not intended for reuse by other apps. View Answer Answer: AD...
What application security best practices should be adhered to while developing an app for Splunk? (Select all that apply.)
What application security best practices should be adhered to while developing an app for Splunk? (Select all that apply.)A . Review the OWASP Top Ten List.B . Store passwords in clear text in .conf files.C . Review the OWASP Secure Coding Practices Quick Reference Guide.D . Ensure that third-party libraries that the app depends...
When updating a knowledge object via REST, which of the following are valid values for the sharing Access Control List property?
When updating a knowledge object via REST, which of the following are valid values for the sharing Access Control List property?A . AppB . UserC . GlobalD . Nobody View Answer Answer: A Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/8.1.2/RESTUM/RESTusing...
Which type of command is tstats?
Which type of command is tstats?A . GeneratingB . TransformingC . Centralized streamingD . Distributable streaming View Answer Answer: A Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/8.1.2/SearchReference/Tstats...