SPLK-1001 exam

Which of the following is an option after clicking an item in search results?A . Saving the item to a reportB . Adding the item to the search.C . Adding the item to a dashboardD . Saving the search to a JSON file.View AnswerAnswer: C

When an alert action is configured to run a script, Splunk must be able to locate the script. Which is one of the directories Splunk will look in to find the script?A . $SPLUNK_HOME/bin/scriptsB . $SPLUNK_HOME/etc/scriptsC . $SPLUNK_HOME/bin/etc/scriptsD . $SPLUNK_HOME/etc/scripts/binView AnswerAnswer: A

In automatic lookup definitions, the _____ fields are those that are not in the event data.A . inputB . outputView AnswerAnswer: B

Which of the following is true about user account settings and preferences?A . Search & Reporting is the only app that can be set as the default application.B . Full names can only be changed by accounts with a Power User or Admin role.C . Time zones are automatically updated...

What is a primary function of a scheduled report?A . Auto-detect changes in performanceB . Auto-generated PDF reports of overall data trendsC . Regularly scheduled archiving to keep disk space use lowD . Triggering an alert in your Splunk instance when certain conditions are metView AnswerAnswer: D

Clicking a SEGMENT on a chart, ________.A . drills down for that valueB . highlights the field value across the chartC . adds the highlighted value to the search criteriaView AnswerAnswer: C

Which of the following describes lookup files?A . Lookup fields cannot be used in searchesB . Lookups contain static data available in the indexC . Lookups add more fields to results returned by a searchD . Lookups pull data at index time and add them to search resultsView AnswerAnswer: B

In automatic lookup definitions, the _____ fields are those that are not in the event data.A . inputB . outputView AnswerAnswer: B

What must be done in order to use a lookup table in Splunk?A . The lookup must be configured to run automatically.B . The contents of the lookup file must be copied and pasted into the search bar.C . The lookup file must be uploaded to Splunk and a lookup...

What can be configured using the Edit Job Settings menu?A . Export the results to CSV formatB . Add the Job results to a dashboardC . Schedule the Job to re-run in 10 minutesD . Change Job Lifetime from 10 minutes to 7 days.View AnswerAnswer: D