Home / Splunk / SPLK-1001

Splunk SPLK-1001 Practice Test - Questions Answers, Page 3

Question list

List of questions

Question 21

(0)

What must be done in order to use a lookup table in Splunk?

Question 22

(0)

Question 23

(0)

Which of the following Splunk components typically resides on the machines where data originates?

Question 24

(0)

What does the following specified time range do? earliest=-72h@h latest=@d

Question 25

(0)

Which of the following is true about user account settings and preferences?

Question 26

(0)

Which of the following are common constraints of the top command?

Question 27

(0)

What is the purpose of using a by clause with the stats command?

Question 28

(0)

Which events will be returned by the following search string? host=www3 status=503

Question 29

(0)

Which of the following searches would return events with failure in index netfw or warn or critical in index netops?

Question 30

(0)

Select the answer that displays the accurate placing of the pipe in the following search string: index=security sourcetype=access_* status=200 stats count by price

Question 21

What must be done in order to use a lookup table in Splunk?

The lookup must be configured to run automatically.

The contents of the lookup file must be copied and pasted into the search bar.

The lookup file must be uploaded to Splunk and a lookup definition must be created.

The lookup file must be uploaded to the etc/apps/lookups folder for automatic ingestion.

Show Answer Comment (0)

Question 22

What is a suggested Splunk best practice for naming reports?

Reports are best named using many numbers so they can be more easily sorted.

Use a consistent naming convention so they are easily separated by characteristics such as group and object.

Name reports as uniquely as possible with no overlap to differentiate them from one another.

Any naming convention is fine as long as you keep an external spreadsheet to keep track.

Show Answer Comment (0)

Question 23

Which of the following Splunk components typically resides on the machines where data originates?

Indexer

Forwarder

Search head

Deployment server

Show Answer Comment (0)

Question 24

What does the following specified time range do? earliest=-72h@h latest=@d

Look back 3 days ago and prior

Look back 72 hours up to one day ago

Look back 72 hours, up to the end of today

Look back from 3 days ago up to the beginning of today

Show Answer Comment (0)

Question 25

Which of the following is true about user account settings and preferences?

Search & Reporting is the only app that can be set as the default application.

Full names can only be changed by accounts with a Power User or Admin role.

Time zones are automatically updated based on the setting of the computer accessing Splunk.

Full name, time zone, and default app can be defined by clicking the login name in the Splunk bar.

Show Answer Comment (0)

Question 26

Which of the following are common constraints of the top command?

limit, count

limit, showpercent

limits, countfield

showperc, countfield

Show Answer Comment (0)

Question 27

What is the purpose of using a by clause with the stats command?

To group the results by one or more fields.

To compute numerical statistics on each field.

To specify how the values in a list are delimited.

To partition the input data based on the split-by fields.

Show Answer Comment (0)

Question 28

Which events will be returned by the following search string? host=www3 status=503

All events that either have a host of www3 or a status of 503.

All events with a host of www3 that also have a status of 503

We need more information: we cannot tell without knowing the time range

We need more information a search cannot be run without specifying an index

Show Answer Comment (0)

Question 29

Which of the following searches would return events with failure in index netfw or warn or critical in index netops?

(index=netfw failure) AND index=netops warn OR critical

(index=netfw failure) OR (index=netops (warn OR critical))

(index=netfw failure) AND (index=netops (warn OR critical))

(index=netfw failure) OR index=netops OR (warn OR critical)

Show Answer Comment (0)

Question 30

Select the answer that displays the accurate placing of the pipe in the following search string: index=security sourcetype=access_* status=200 stats count by price

index=security sourcetype=access_* status=200 stats | count by price

index=security sourcetype=access_* status=200 | stats count by price

index=security sourcetype=access_* status=200 | stats count | by price

index=security sourcetype=access_* | status=200 | stats count by price

Show Answer Comment (0)

Total 246 questions

1 2 3 4 5

Go to page: of 25

Splunk SPLK-1001 Practice Test - Questions Answers, Page 3

Question list

List of questions

Question 21

(0)

Question 22

(0)

Question 23

(0)

Question 24

(0)

Question 25

(0)

Question 26

(0)

Question 27

(0)

Question 28

(0)

Question 29

(0)

Question 30

(0)

Related questions

Question