SPLK-1001

What user interface component allows for time selection?A . Time summaryB . Time range pickerC . Search time pickerD . Data source time statisticsView AnswerAnswer: B

What does the values function of the stats command do?A . Lists all values of a given field.B . Lists unique values of a given field.C . Returns a count of unique values for a given field.D . Returns the number of events that match the search.View AnswerAnswer: C

In a deployment with multiple indexes, what will happen when a search is run and an index is not specified in the search string?A . No events will be returned.B . Splunk will prompt you to specify an index.C . All non-indexed events to which the user has access will...

What determines the scope of data that appears in a scheduled report?A . All data accessible to the User role will appear in the report.B . All data accessible to the owner of the report will appear in the report.C . All data accessible to all users will appear in...

A collection of items containing things such as data inputs, UI elements, and knowledge objects is known as what?A . An appB . JSONC . A roleD . An enhanced solutionView AnswerAnswer: A

How do you add or remove fields from search results?A . Use field +to add and field -to remove.B . Use table +to add and table -to remove.C . Use fields +to add and fields Cto remove.D . Use fields Plusto add and fields Minusto remove.View AnswerAnswer: C Explanation: Reference:...

When sorting on multiple fields with the sort command, what delimiter can be used between the field names in the search?A . |B . $C . !D . ,View AnswerAnswer: D Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/SearchReference/Sort

What is a suggested Splunk best practice for naming reports?A . Reports are best named using many numbers so they can be more easily sorted.B . Use a consistent naming convention so they are easily separated by characteristics such as group and object.C . Name reports as uniquely as possible...

Which search string only returns events from hostWWW3?A . host=*B . host=WWW3C . host=WWW*D . Host=WWW3View AnswerAnswer: B

Which of the following constraints can be used with the top command?A . limitB . usepercC . addtotalsD . fieldcountView AnswerAnswer: A Explanation: Reference: https://answers.splunk.com/answers/339141/how-to-use-top-command-or-stats-with-sort­results.html