SPLK-1001

Which of the following file types is an option for exporting Splunk search results?A . PDFB . JSONC . XLSD . RTFView AnswerAnswer: A Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/ExportdatausingSplunkWeb

Which of the following Splunk components typically resides on the machines where data originates?A . IndexerB . ForwarderC . Search headD . Deployment serverView AnswerAnswer: B

Which of the following is true about user account settings and preferences?A . Search & Reporting is the only app that can be set as the default application.B . Full names can only be changed by accounts with a Power User or Admin role.C . Time zones are automatically updated...

What is the purpose of using a by clause with the stats command?A . To group the results by one or more fields.B . To compute numerical statistics on each field.C . To specify how the values in a list are delimited.D . To partition the input data based on...

In the fields sidebar, what indicates that a field is numeric?A . A number to the right of the field name.B . A # symbol to the left of the field name.C . A lowercase n to the left of the field name.D . A lowercase n to the right...

By default, how long does Splunk retain a search job?A . 10 MinutesB . 15 MinutesC . 1 DayD . 7 DaysView AnswerAnswer: A Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Extendjoblifetimes

How are events displayed after a search is executed?A . In chronological order.B . Randomly by default.C . In reverse chronological order.D . Alphabetically according to field name.View AnswerAnswer: C

Which of the following are common constraints of the top command?A . limit, countB . limit, showpercentC . limits, countfieldD . showperc, countfieldView AnswerAnswer: A

What is one benefit of creating dashboard panels from reports?A . Any newly created dashboard will include that report.B . There are no benefits to creating dashboard panels from reports.C . It makes the dashboard more efficient because it only has to run one search string.D . Any change to...

How can search results be kept longer than 7 days?A . By scheduling a report.B . By creating a link to the job.C . By changing the job settings.D . By changing the time range picker to more than 7 days.View AnswerAnswer: C Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Extendjoblifetimes