Splunk SPLK-1001 Practice Test - Questions Answers, Page 10
Related questions
Question 91

Which search string only returns events from hostWWW3?
B. host=WWW3
C. host=WWW*
D. Host=WWW3
Suggested answer: B
Question 92

What must be done before an automatic lookup can be created? (select all that apply)
The lookup command must be used.
The lookup definition must be created.
The lookup file must be uploaded to Splunk.
The lookup file must be verified using the inputlookup command.
Suggested answer: B
Question 93

When writing searches in Splunk, which of the following is true about Booleans?
They must be lowercase.
They must be uppercase.
They must be in quotations.
They must be in parentheses.
Suggested answer: B
Question 94

Which of the following constraints can be used with the top command?
limit
useperc
addtotals
fieldcount
Suggested answer: A
Question 95

Which of the following represents the Splunk recommended naming convention for dashboards?
Description_Group_Object
Group_Description_Object
Group_Object_Description
Object_Group_Description
Suggested answer: C
Question 96

How can search results be kept longer than 7 days?
By scheduling a report.
By creating a link to the job.
By changing the job settings.
By changing the time range picker to more than 7 days.
Suggested answer: A
Question 97

Which of the following is a Splunk search best practice?
Filter as early as possible.
Never specify more than one index.
Include as few search terms as possible.
Use wildcards to return more search results.
Suggested answer: A
Question 98

How are events displayed after a search is executed?
In chronological order.
Randomly by default.
In reverse chronological order.
Alphabetically according to field name.
Suggested answer: C
Question 99

After running a search, what effect does clicking and dragging across the timeline have?
Executes a new search.
Filters current search results.
Moves to past or future events.
Expands the time range of the search.
Suggested answer: B
Question 100

Which command is used to review the contents of a specified static lookup file?
lookup
csvlookup
inputlookup
outputlookup
Suggested answer: C
Question