Splunk SPLK-1002 Practice Test - Questions Answers, Page 21
List of questions
Question 201
Which of the following examples would use a POST workflow action?
Question 202
Which field will be used to populate the field if the productName and product:d fields have values for a given event?
Question 203
Which of the following statements would help a user choose between the transaction and stats commands?
Question 204
When can a pipe follow a macro?
Question 205
Which of the following statements describes the use of the Filed Extractor (FX)?
Question 206
Which of the following searches would return a report of sales by product-name?
Question 207
A data model consists of which three types of datasets?
Question 208
Which workflow uses field values to perform a secondary search?
Question 209
When using the transaction command, what does the argument maxspan do?
Question 210
In most large Splunk environments, what is the most efficient command that can be used to group events by fields/
Question