SPLK-1002 V4

This function of the stats command allows you to return the middle-most value of field X.A . Median(X)B . Eval by XC . Fields(X)D . Values(X)View AnswerAnswer: A

Which of the following describes the Splunk Common Information Model (CIM) add-on?A . The CIM add-on uses machine learning to normalize data.B . The CIM add-on contains dashboards that show how to map data.C . The CIM add-on contains data models to help you normalize data.D . The CIM add-on...

Which of the following statements describe calculated fields? (select all that apply)A . Calculated fields can be used in the search bar.B . Calculated fields can be based on an extracted field.C . Calculated fields can only be applied to host and sourcetype.D . Calculated fields are shortcuts for performing...

The stats command will create a _____________ by default.A . TableB . ReportC . Pie chartView AnswerAnswer: A

Which of the following searches show a valid use of macro? (Select all that apply)A . index=main source=mySource oldField=* |'makeMyField(oldField)'| table _time newFieldB . index=main source=mySource oldField=* | stats if('makeMyField(oldField)') | table _time newFieldC . index=main source=mySource oldField=* | eval newField='makeMyField(oldField)'| table _time newFieldD . index=main source=mySource oldField=* | "'newField('makeMyField(oldField)')'"...

A report scheduled to run every 15 mins. but takes 17 mins. to complete is in danger of being_____.A . skipped or deferredB . automatically acceleratedC . deletedD . all of the aboveView AnswerAnswer: A Explanation: A report that is scheduled to run every 15 minutes but takes 17 minutes...

By default search results are not returned in ________ order.A . ChronologicalB . Reverser chronologicalC . ASCIED . AlphabeticalView AnswerAnswer: A, D

Highlighted search terms indicate _________ search results in Splunk.A . Display as selected fields.B . SortedC . Charted based on timeD . MatchingView AnswerAnswer: D Explanation: Highlighted search terms indicate matching search results in Splunk, which means that they show which parts of your events match your search string2. For...

Which of the following search control will not re-rerun the search? (Select all that apply.)A . zoom outB . selecting a bar on the timelineC . deselectD . selecting a range of bars on the timelinesView AnswerAnswer: B, C, D Explanation: The timeline is a graphical representation of your search...

The Field Extractor (FX) is used to extract a custom field. A report can be created using this custom field. The created report can then be shared with other people in the organization. If another person in the organization runs the shared report and no results are returned, why might...