Practice SPLK-1002 Exam Online

Question 1

This is what Splunk uses to categorize the data that is being indexed.

A : sourcetype

B : index

C : source

D : host

Answer: A

Question 2

Which of the following statements describe GET workflow actions?

A : GET workflow actions must be configured with POST arguments.

B : Configuration of GET workflow actions includes choosing a sourcetype.

C : Label names for GET workflow actions must include a field name surrounded by dollar signs.

D :

GET workflow actions can be configured to open the URT link in the current window or in a new window

Answer: D

Question 3

Highlighted search terms indicate _________ search results in Splunk.

A : Display as selected fields.

B : Sorted

C : Charted based on time

D : Matching

Answer: D

Question 4

There are several ways to access the field extractor. Which option automatically identifies data type, source type, and sample event?

A : Event Actions > Extract Fields

B : Fields sidebar > Extract New Field

C : Settings > Field Extractions > New Field Extraction

D : Settings > Field Extractions > Open Field Extraction

Answer: B

Question 5

Data model are composed of one or more of which of the following datasets? (select all that apply.)

A : Events datasets

B : Search datasets

C : Transaction datasets

D : Any child of event, transaction, and search datasets

Answer: A,B,C

Name:	Splunk Core Certified Power User
Exam Code:	SPLK-1002
Certification:	Splunk Core Certified Power User
Vendor:	Splunk
Total Questions:	254
Last Updated:	Apr 22, 2024

Splunk SPLK-1002