SPLK-1001

Select the answer that displays the accurate placing of the pipe in the following search string: index=security sourcetype=access_* status=200 stats count by priceA . index=security sourcetype=access_* status=200 stats | count by priceB . index=security sourcetype=access_* status=200 | stats count by priceC . index=security sourcetype=access_* status=200 | stats count | by...

Matching search terms are highlighted.A . YesB . NoView AnswerAnswer: A

What user interface component allows for time selection?A . Time summaryB . Time range pickerC . Search time pickerD . Data source time statisticsView AnswerAnswer: B

After running a search, what effect does clicking and dragging across the timeline have?A . Executes a new search.B . Filters current search results.C . Moves to past or future events.D . Expands the time range of the search.View AnswerAnswer: B

This search will return 20 results. SEARCH: error | top host limit = 20A . TrueB . FalseView AnswerAnswer: A

Use this command to use lookup fields in a search and see the lookup fields in the field sidebar.A . inputlookupB . lookupView AnswerAnswer: B

Select the correct option that applies to Index time processing (Choose three.).A . IndexingB . SearchingC . ParsingD . SettingsE . InputView AnswerAnswer: A,C,E

The default host name used in Inputs general settings can not be changed.A . FalseB . TrueView AnswerAnswer: A

What is the primary use for the rare command1?A . To sort field values in descending orderB . To return only fields containing five or fewer valuesC . To find the least common values of a field in a datasetD . To find the fields with the fewest number of...

Assuming a user has the capability to edit reports, which of the following are editable?A . Acceleration, schedule, permissionsB . The report’s name, schedule, permissionsC . The report’s name, acceleration, scheduleD . The report’s name, acceleration, permissionsView AnswerAnswer: A Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Report/Createandeditreports