Splunk Core Certified User - SPLK-1001 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

What is Search Assistant in Splunk?

A. It is only available to Admins. B. Such feature does not exist in Splunk. C. Shows options to complete the search string

Discussion 0

Correct Answer: C Vote an answer

Question 2

What are the three main Splunk components?

A. Search head, SQL database, forwarder B. Search head, SSD, heavy weight agent C. Search head, GPU, streamer D. Search head, indexer, forwarder

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

What is one benefit of creating dashboard panels from reports?

A. There are no benefits to creating dashboard panels from reports. B. It makes the dashboard more efficient because it only has to run one search string. C. Any change to the underlying report will affect every dashboard that utilizes that report. D. Any newly created dashboard will include that report.

Discussion 0

Correct Answer: B Vote an answer

Question 4

Which of the following is an option after clicking an item in search results?

A. Adding the item to a dashboard B. Saving the item to a report C. Saving the search to a JSON file. D. Adding the item to the search.

Discussion 0

Correct Answer: B Vote an answer

Question 5

Creating Data Models:
Object ATTRIBUTES do not define ___________.

A. fields for the object B. a base search for the object

Discussion 0

Correct Answer: B Vote an answer

Question 6

It is mandatory for the lookup file to have this for an automatic lookup to work.

A. Input filed B. Timestamp C. At least five columns D. Source type

Discussion 0

Correct Answer: A Vote an answer

Question 7

Use this command to use lookup fields in a search and see the lookup fields in the field sidebar.

A. inputlookup B. lookup

Discussion 0

Correct Answer: B Vote an answer

Question 8

Which search would return events from the access_combined sourcetype?

A. sourcetype=Access_Combined B. Sourcetype=access_combined C. SOURCETYPE=access_combined D. Sourcetype=Access_Combined

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

What is the default lifetime of every Splunk search job?

A. All search jobs are saved for 10 minutes B. All search jobs are saved for 10 weeks C. All search jobs are saved for 10 days D. All search jobs are saved for 10 hours

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 10

Which of the following constraints can be used with the top command?

A. limit B. useperc C. addtotals D. fieldcount

Discussion 0

Correct Answer: A Vote an answer

Question 11

How many minutes, by default, is the time to live (ttl) for an ad-hoc search job?

A. 10 minutes B. 5 minutes C. 60 minutes D. 1 minute

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).