- All Exams Instant Download
What does the following search do?
What does the following search do? A . Creates a table of the total count of users and split by corndogs.B . Creates a table of the total count of mysterymeat corndogs split by user.C . Creates a table with the count of all types of corndogs eaten split by...
Which of the following statements about data models and pivot are true? (select all that apply)
Which of the following statements about data models and pivot are true? (select all that apply)A . They are both knowledge objects.B . Data models are created out of datasets called pivots.C . Pivot requires users to input SPL searches on data models.D . Pivot allows the creation of data...
When creating a Search workflow action, which field is required?
When creating a Search workflow action, which field is required?A . Search stringB . Data model nameC . Permission settingD . An eval statementView AnswerAnswer: A Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/Setupasearchworkflowaction A workflow action is a link that appears when you click an event field value in your search results2. A workflow...
Data model are composed of one or more of which of the following datasets? (select all that apply.)
Data model are composed of one or more of which of the following datasets? (select all that apply.)A . Events datasetsB . Search datasetsC . Transaction datasetsD . Any child of event, transaction, and search datasetsView AnswerAnswer: A, B, C Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/Aboutdatamodels Data models are collections of datasets that...
Which of the following about reports is/are true?
Which of the following about reports is/are true?A . Reports are knowledge objects.B . Reports can be scheduled.C . Reports can run a script.D . All of the above.View AnswerAnswer: D Explanation: A report is a way to save a search and its results in a format that you can...
Which of the following searches will return events contains a tag name Privileged?
Which of the following searches will return events contains a tag name Privileged?A . Tag= PrivB . Tag= Pri*C . Tag= Priv*D . Tag= PrivilegedView AnswerAnswer: B Explanation: Reference: https://docs.splunk.com/Documentation/PCI/4.1.0/Install/PrivilegedUserActivity A tag is a descriptive label that you can apply to one or more fields or field values in your...
Which delimiters can the Field Extractor (FX) detect? (select all that apply)
Which delimiters can the Field Extractor (FX) detect? (select all that apply)A . TabsB . PipesC . SpacesD . CommasView AnswerAnswer: B, C, D Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/FXSelectMethodstep The Field Extractor (FX) is a tool that helps you extract fields from your data using delimiters or regular expressions. Delimiters are characters...
The fields sidebar does not show________. (Select all that apply.)
The fields sidebar does not show________. (Select all that apply.)A . interesting fieldsB . selected fieldsC . all extracted fieldsView AnswerAnswer: C Explanation: The fields sidebar is a panel that shows the fields that are present in your search results2. The fields sidebar does not show all extracted fields, which...
Which of the following workflow actions can be executed from search results? (select all that apply)
Which of the following workflow actions can be executed from search results? (select all that apply)A . GETB . POSTC . LOOKUPD . SearchView AnswerAnswer: A, B, D Explanation: As mentioned before, there are two types of workflow actions: GET and POST1. Both types of workflow actions can be executed...
Which of the following statements describes macros?
Which of the following statements describes macros?A . A macro is a reusable search string that must contain the full search.B . A macro is a reusable search string that must have a fixed time range.C . A macro Is a reusable search string that may have a flexible time...
