Home / Splunk / SPLK-1002

Question list

List of questions

Question 1

(0)

A field alias has been created based on an original field. A search without any transforming commands is then executed in Smart Mode. Which field name appears in the results?

Question 2

(0)

When performing a regular expression (regex) field extraction using the Field Extractor (FX), what happens when the require option is used?

Question 3

(0)

Which group of users would most likely use pivots?

Question 4

(0)

When using timechart, how many fields can be listed after a by clause?

Question 5

(0)

What is the correct syntax to search for a tag associated with a value on a specific fields?

Question 6

(0)

What functionality does the Splunk Common Information Model (CIM) rely on to normalize fields with different names?

Question 7

(0)

When should you use the transaction command instead of the scats command?

Question 8

(0)

Which of the following statements describes field aliases?

Question 9

(0)

What is the correct way to name a macro with two arguments?

Question 10

(0)

When using a field value variable with a Workflow Action, which punctuation mark will escape the data

Question 163 - SPLK-1002 discussion

The macro weekly sales (2) contains the search string:

index=games | eval ProductSales = $Price$ * $AmountSold$

Which of the following will return results?

'weekly sales (3)'

'weekly_sales($3.995, $108)'

'weekly_sales (3.99, 10)'

'weekly sales (3.99, 10)'

Show Answer

asked 23/09/2024

Van Raoul Datuin

32 questions

Your answer: A B C D

0 comments

Sorted by