SPLK-1001 exam

Which of the following is the recommended way to create multiple dashboards displaying data from the same search?A . Save the search as a report and use it in multiple dashboards as neededB . Save the search as a dashboard panel for each dashboard that needs the dataC . Save...

Creating Data Models: Object ATTRIBUTES do not define ___________.A . a base search for the objectB . fields for the objectView AnswerAnswer: A

How can another user gain access to a saved report?A . The owner of the report can edit permissions from the Edit dropdownB . Only users with an Admin or Power User role can access other users' reportsC . Anyone can access any reports marked as public within a shared...

When looking at a dashboard panel that is based on a report, which of the following is true?A . You can modify the search string in the panel, and you can change and configure the visualization.B . You can modify the search string in the panel, but you cannot change...

Which of the following index searches would provide the most efficient search performance?A . index=*B . index=web OR index=s*C . (index=web OR index=sales)D . *index=sales AND index=web*View AnswerAnswer: C

By default, how long does Splunk retain a search job?A . 10 MinutesB . 15 MinutesC . 1 DayD . 7 DaysView AnswerAnswer: A

This function of the stats command allows you to return the middle-most value of field X.A . Median(X)B . Eval by XC . Fields(X)D . Values(X)View AnswerAnswer: A

36. Lookups can be private for a user.A . TrueB . FalseView AnswerAnswer: A

Which command automatically returns percent and count columns when executing searches?A . topB . statsC . tableD . percentView AnswerAnswer: A

Which of the following are functions of the stats command?A . count, sum, addB . count, sum, lessC . sum, avg, valuesD . sum, values, tableView AnswerAnswer: C