SPLK-1001 exam

In the fields sidebar, what indicates that a field is numeric?A . A number to the right of the field name.B . A # symbol to the left of the field name.C . A lowercase n to the left of the field name.D . A lowercase n to the right...

By default, how long does Splunk retain a search job?A . 10 MinutesB . 15 MinutesC . 1 DayD . 7 DaysView AnswerAnswer: A Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Extendjoblifetimes

How are events displayed after a search is executed?A . In chronological order.B . Randomly by default.C . In reverse chronological order.D . Alphabetically according to field name.View AnswerAnswer: C

Which of the following are common constraints of the top command?A . limit, countB . limit, showpercentC . limits, countfieldD . showperc, countfieldView AnswerAnswer: A

What is one benefit of creating dashboard panels from reports?A . Any newly created dashboard will include that report.B . There are no benefits to creating dashboard panels from reports.C . It makes the dashboard more efficient because it only has to run one search string.D . Any change to...

How can search results be kept longer than 7 days?A . By scheduling a report.B . By creating a link to the job.C . By changing the job settings.D . By changing the time range picker to more than 7 days.View AnswerAnswer: C Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Extendjoblifetimes

What syntax is used to link key/value pairs in search strings?A . ParenthesesB . @ or # symbolsC . Quotation marksD . Relational operators such as =, <, or >View AnswerAnswer: D

Which of the following searches would return events with failure in index netfw or warn or critical in index netops?A . (index=netfw failure) AND index=netops warn OR criticalB . (index=netfw failure) OR (index=netops (warn OR critical))C . (index=netfw failure) AND (index=netops (warn OR critical))D . (index=netfw failure) OR index=netops OR...

Select the answer that displays the accurate placing of the pipe in the following search string: index=security sourcetype=access_* status=200 stats count by priceA . index=security sourcetype=access_* status=200 stats | count by priceB . index=security sourcetype=access_* status=200 | stats count by priceC . index=security sourcetype=access_* status=200 | stats count | by...

Which of the following are functions of the stats command?A . count, sum, addB . count, sum, lessC . sum, avg, valuesD . sum, values, tableView AnswerAnswer: C