SPLK-1001

What determines the scope of data that appears in a scheduled report?A . All data accessible to the User role will appear in the report.B . All data accessible to the owner of the report will appear in the report.C . All data accessible to all users will appear in...

Following are the time selection option while making search: (Choose all that apply.)A . Date & Time RangeB . AdvancedC . Date RangeD . PresetsE . RelativeView AnswerAnswer: B

Forward Option gather and forward data to indexers over a receiving port from remote machines.A . FalseB . TrueView AnswerAnswer: B

Select the correct option that applies to Index time processing (Choose three.).A . IndexingB . SearchingC . ParsingD . SettingsE . InputView AnswerAnswer: A,C,E

Which of the following is a metadata field assigned to every event in Splunk?A . hostB . ownerC . bytesD . actionView AnswerAnswer: A Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Data/Assignmetadatatoeventsdynamically

What are the three main Splunk components?A . Search head, GPU, streamerB . Search head, indexer, forwarderC . Search head, SQL database, forwarderD . Search head, SSD, heavy weight agentView AnswerAnswer: B Explanation: Reference: https://www.edureka.co/blog/splunk-architecture/

Field values are case sensitive.A . TrueB . FalseView AnswerAnswer: B

What kind of logs can Splunk Index?A . Only A, BB . Router and Switch LogsC . Firewall and Web Server LogsD . Only CE . Database logsF . All firewall, web server, database, router and switch logsView AnswerAnswer: F

Which of the following is the most efficient search?A . index=* “failed password”B . “failed password” index=*C . (index=* OR index=security) “failed password”D . index=security “failed password”View AnswerAnswer: A

When displaying results of a search, which of the following is true about line charts?A . Line charts are optimal for single and multiple series.B . Line charts are optimal for single series when using Fast mode.C . Line charts are optimal for multiple series with 3 or more columns.D...