ExamGecko
Home / Splunk / SPLK-1002
Ask Question

Splunk SPLK-1002 Practice Test - Questions Answers, Page 23

Question list
Search

Question 221

Report
Export
Collapse

Which tool uses data models to generate reports and dashboard panels without using SPL?

Become a Premium Member for full access
  Unlock Premium Member

Question 222

Report
Export
Collapse

Which knowledge object is used to normalize field names to comply with the Splunk Common Information Model (CIM)?

Become a Premium Member for full access
  Unlock Premium Member

Question 223

Report
Export
Collapse

How is an event type created from the search window? (select all that apply)

Become a Premium Member for full access
  Unlock Premium Member

Question 224

Report
Export
Collapse

Consider the following search:

index=web sourcetype=access_corabined

The log shows several events that share the same jsesszonid value (SD462K101O2F267). View the events as a group.

From the following list, which search groups events by jSSESSIONID?

Become a Premium Member for full access
  Unlock Premium Member

Question 225

Report
Export
Collapse

Which of the following is true about the Splunk Common Information Model (CIM)?

Become a Premium Member for full access
  Unlock Premium Member

Question 226

Report
Export
Collapse

When defining a macro, what are the required elements?

Become a Premium Member for full access
  Unlock Premium Member

Question 227

Report
Export
Collapse

Which of the following expressions could be used to create a calculated field called gigabytes?

Become a Premium Member for full access
  Unlock Premium Member

Question 228

Report
Export
Collapse

Consider the the following search run over a time range of last 7 days:

index=web sourcetype=access_conbined | timechart avg(bytes) by product_nane

Which option is used to change the default time span so that results are grouped into 12 hour intervals?

Become a Premium Member for full access
  Unlock Premium Member

Question 229

Report
Export
Collapse

What commands can be used to group events from one or more data sources?

Become a Premium Member for full access
  Unlock Premium Member

Question 230

Report
Export
Collapse

Tags can reference which of the following knowledge objects?

Become a Premium Member for full access
  Unlock Premium Member
Total 291 questions
Go to page: of 30