ExamGecko
Home / Splunk / SPLK-1002 / List of questions
Ask Question

Splunk SPLK-1002 Practice Test - Questions Answers, Page 14

List of questions

Question 131

Report
Export
Collapse

Which of the following statements describes POST workflow actions?

Configuration of a POST workflow action includes choosing a sourcetype.
Configuration of a POST workflow action includes choosing a sourcetype.
POST workflow actions can be configured to send email to the URI location.
POST workflow actions can be configured to send email to the URI location.
By default, POST workflow action are shown in both the event and field menus.
By default, POST workflow action are shown in both the event and field menus.
POST workflow actions can be configured to send POST arguments to the URI location.
POST workflow actions can be configured to send POST arguments to the URI location.
Suggested answer: D
asked 23/09/2024
adnan reubin
30 questions

Question 132

Report
Export
Collapse

What is a limitation of searches generated by workflow actions?

Searches generated by workflow action cannot use macros.
Searches generated by workflow action cannot use macros.
Searches generated by workflow actions must be less than 256 characters long.
Searches generated by workflow actions must be less than 256 characters long.
Searches generated by workflow action must run in the same app as the workflow action.
Searches generated by workflow action must run in the same app as the workflow action.
Searches generated by workflow action run with the same permissions as the user running them.
Searches generated by workflow action run with the same permissions as the user running them.
Suggested answer: D
asked 23/09/2024
George Morales
47 questions

Question 133

Report
Export
Collapse

Which workflow action method can be used the action type is set to link?

GET
GET
PUT
PUT
Search
Search
UPDATE
UPDATE
Suggested answer: A

Explanation:

https://docs.splunk.com/Documentation/Splunk/8.0.2/Knowledge/SetupaGETworkflowaction

Define a GET workflow action

Steps

Navigate toSettings > Fields > Workflow Actions.

ClickNewto open up a new workflow action form.

Define aLabelfor the action.

TheLabelfield enables you to define the text that is displayed in either the field or event workflow menu. Labels can be static or include the value of relevant fields.

Determine whether the workflow action applies to specific fields or event types in your data.

UseApply only to the following fieldsto identify one or more fields. When you identify fields, the workflow action only appears for events that have those fields, either in their event menu or field menus. If you leave it blank or enter an asterisk the action appears in menus for all fields.

UseApply only to the following event typesto identify one or more event types. If you identify an event type, the workflow action only appears in the event menus for events that belong to the event type.

ForShow action indetermine whether you want the action to appear in theEvent menu, theFields menus, orBoth.

SetAction typetolink.

InURIprovide a URI for the location of the external resource that you want to send your field values to.

Similar to theLabelsetting, when you declare the value of a field, you use the name of the field enclosed by dollar signs.

Variables passed in GET actions via URIs are automaticallyURL encodedduring transmission. This means you can include values that have spaces between words or punctuation characters.

UnderOpen link in, determine whether the workflow action displays in the current window or if it opens the link in a new window.

Set theLink methodtoget.

ClickSaveto save your workflow action definition.

asked 23/09/2024
Dimitri Alvarez Ruiz
41 questions

Question 134

Report
Export
Collapse

When using | timechart by host, which field is represented in the x-axis?

date
date
host
host
time
time
_time
_time
Suggested answer: D
asked 23/09/2024
Jonathan Ang
36 questions

Question 135

Report
Export
Collapse

Which of the following commands support the same set of functions?

stats, eval, table
stats, eval, table
search, where, eval
search, where, eval
stats, chart, timechart
stats, chart, timechart
transaction, chart, timechart
transaction, chart, timechart
Suggested answer: C
asked 23/09/2024
Marc Codó
45 questions

Question 136

Report
Export
Collapse

The eval command allows you to do which of the following? (Choose all that apply.)

Format values
Format values
Convert values
Convert values
Perform calculations
Perform calculations
Use conditional statements
Use conditional statements
Suggested answer: A, B, C, D
asked 23/09/2024
Amidou Florian TOURE
33 questions

Question 137

Report
Export
Collapse

When using the timechart command, how can a user group the events into buckets based on time?

Using the span argument.
Using the span argument.
Using the duration argument.
Using the duration argument.
Using the interval argument.
Using the interval argument.
Adjusting the fieldformat options.
Adjusting the fieldformat options.
Suggested answer: A
asked 23/09/2024
AMMAR SHEIKH SALEH
33 questions

Question 138

Report
Export
Collapse

Which type of visualization shows relationships between discrete values in three dimensions?

Pie chart
Pie chart
Line chart
Line chart
Bubble chart
Bubble chart
Scatter chart
Scatter chart
Suggested answer: C

Explanation:

https://docs.splunk.com/Documentation/DashApp/0.9.0/DashApp/chartsBub

asked 23/09/2024
Alexandru adrian Blaga
22 questions

Question 139

Report
Export
Collapse

Which of the following is a function of the Splunk Common Information Model (CIM)?

Normalizing data across a Splunk deployment.
Normalizing data across a Splunk deployment.
Providing templates for reports and dashboards.
Providing templates for reports and dashboards.
Algorithmically shifting events to other indexes.
Algorithmically shifting events to other indexes.
Reingesting previously indexed data with new field names.
Reingesting previously indexed data with new field names.
Suggested answer: A
asked 23/09/2024
Robert Akehurst
32 questions

Question 140

Report
Export
Collapse

What information must be included when using the datamodel command?

status field
status field
Multiple indexes
Multiple indexes
Data model field name.
Data model field name.
Data model dataset name.
Data model dataset name.
Suggested answer: D
asked 23/09/2024
james campbell
38 questions
Total 299 questions
Go to page: of 30