SPLK-1001

How can another user gain access to a saved report?A . The owner of the report can edit permissions from the Edit dropdownB . Only users with an Admin or Power User role can access other users' reportsC . Anyone can access any reports marked as public within a shared...

NOT status = 100:A . Will display result depending on the data.B . Will return event where status field exist but value of that field is not 100.C . Will return event where status field exist but value of that field is not 100 and all events where status field...

Select the answer that displays the accurate placing of the pipe in the following search string: index=security sourcetype=access_* status=200 stats count by priceA . index=security sourcetype=access_* status=200 stats | count by priceB . index=security sourcetype=access_* status=200 | stats count by priceC . index=security sourcetype=access_* status=200 | stats count | by...

When sorting on multiple fields with the sort command, what delimiter can be used between the field names in the search?A . |B . $C . !D . ,View AnswerAnswer: D

Matching search terms are highlighted.A . YesB . NoView AnswerAnswer: A

This function of the stats command allows you to return the middle-most value of field X.A . Median(X)B . Eval by XC . Fields(X)D . Values(X)View AnswerAnswer: A

Query - status != 100:A . Will return event where status field exist but value of that field is not 100.B . Will return event where status field exist but value of that field is not 100 and all events where status field doesn't exist.C . Will get different results...

Which Boolean operator is always implied between two search terms, unless otherwise specified?A . ORB . NOTC . ANDD . XORView AnswerAnswer: C

What happens when a field is added to the Selected Fields list in the fields sidebar'?A . Splunk will re-run the search job in Verbose Mode to prioritize the new Selected FieldB . Splunk will highlight related fields as a suggestion to add them to the Selected Fields list.C ....

Interesting fields are the fields that have at least 20% of resulting fields.A . TrueB . FalseView AnswerAnswer: A