SPLK-1001 exam

Which command is used to review the contents of a specified static lookup file?A . lookupB . csvlookupC . inputlookupD . outputlookupView AnswerAnswer: C

After running a search, what effect does clicking and dragging across the timeline have?A . Executes a new search.B . Filters current search results.C . Moves to past or future events.D . Expands the time range of the search.View AnswerAnswer: C Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Usethetimeline

Which of the following represents the Splunk recommended naming convention for dashboards?A . Description_Group_ObjectB . Group_Description_ObjectC . Group_Object_DescriptionD . Object_Group_DescriptionView AnswerAnswer: C

When editing a dashboard, which of the following are possible options? (select all that apply)A . Add an output.B . Export a dashboard panel.C . Modify the chart type displayed in a dashboard panel.D . Drag a dashboard panel to a different location on the dashboard.View AnswerAnswer: C

Which of the following constraints can be used with the top command?A . limitB . usepercC . addtotalsD . fieldcountView AnswerAnswer: A

Which of the following constraints can be used with the top command?A . limitB . usepercC . addtotalsD . fieldcountView AnswerAnswer: A Explanation: Reference: https://answers.splunk.com/answers/339141/how-to-use-top-command-or-stats-with-sort­results.html

How are events displayed after a search is executed?A . In chronological order.B . Randomly by default.C . In reverse chronological order.D . Alphabetically according to field name.View AnswerAnswer: A Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/SearchReference/Eventorderfunctions

Which of the following represents the Splunk recommended naming convention for dashboards?A . Description_Group_ObjectB . Group_Description_ObjectC . Group_Object_DescriptionD . Object_Group_DescriptionView AnswerAnswer: C Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Knowledge/ Developnamingconventionsforknowledgeobjecttitles

What is a primary function of a scheduled report?A . Auto-detect changes in performance.B . Auto-generated PDF reports of overall data trends.C . Regularly scheduled archiving to keep disk space use low.D . Triggering an alert in your Splunk instance when certain conditions are met.View AnswerAnswer: D Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Report/Schedulereports

When sorting on multiple fields with the sort command, what delimiter can be used between the field names in the search?A . |B . $C . !D . ,View AnswerAnswer: D Explanation: Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/SearchReference/Sort