SPLK-1001 V1

Which search matches the events containing the terms "error" and "fail"?A . index=security Error FailB . index=security error OR failC . index=security “error failure”D . index=security NOT error NOT failView AnswerAnswer: A Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/SearchReference/Search

When editing a dashboard, which of the following are possible options? (select all that apply)A . Add an output.B . Export a dashboard panel.C . Modify the chart type displayed in a dashboard panel.D . Drag a dashboard panel to a different location on the dashboard.View AnswerAnswer: D

Use this command to use lookup fields in a search and see the lookup fields in the field sidebar.A . inputlookupB . lookupView AnswerAnswer: B

Select the answer that displays the accurate placing of the pipe in the following search string: index=security sourcetype=access_* status=200 stats count by priceA . index=security sourcetype=access_* status=200 stats | count by priceB . index=security sourcetype=access_* status=200 | stats count by priceC . index=security sourcetype=access_* status=200 | stats count | by...

Which is a primary function of the timeline located under the search bar?A . To differentiate between structured and unstructured events in the dataB . To sort the events returned by the search command in chronological orderC . To zoom in and zoom out. although this does not change the...

This clause is used to group the output of a stats command by a specific name.A . RexB . AsC . ListD . ByView AnswerAnswer: D

Which of the following commands will show the maximum bytes?A . sourcetype=access_* | maximum totals by bytesB . sourcetype=access_* | avg (bytes)C . sourcetype=access_* | stats max(bytes)D . sourcetype=access_* | max(bytes)View AnswerAnswer: C

What syntax is used to link key/value pairs in search strings?A . action+purchaseB . action=purchaseC . action | purchaseD . action equal purchaseView AnswerAnswer: B

What is the main requirement for creating visualizations using the Splunk UI?A . Your search must transform event data into Excel file format first.B . Your search must transform event data into XML formatted data first.C . Your search must transform event data into statistical data tables first.D . Your...

What are the steps to schedule a report?A . After saving the report, click Schedule.B . After saving the report, click Event Type.C . After saving the report, click Scheduling.D . After saving the report, click Dashboard Panel.View AnswerAnswer: A