Practice SPLK-1001 Exam Online

Question 1

After running a search, what effect does clicking and dragging across the timeline have?

A : Executes a new search

B : Filters current search results.

C : Moves to past or future events

D : Expands the time range of the search.

Answer: B

Question 2

What does the following specified time range do?

earliest=-72h@h latest=@d

A : Look back 3 days ago and prior

B : Look back 72 hours up to one day ago

C : Look back 72 hours, up to the end of today

D : Look back from 3 days ago up to the beginning of today

Answer: D

Question 3

In the Search and Reporting app, which tab displays timecharts and bar charts?

A : Events

B : Patterns

C : Statistics

D : Visualization

Answer: D

Question 4

What kind of logs can Splunk Index?

A : Only A, B

B : Router and Switch Logs

C : Firewall and Web Server Logs

D : Only C

E : Database logs

F : All firewall, web server, database, router and switch logs

Answer: A

Question 5

How can another user gain access to a saved report?

A : The owner of the report can edit permissions from the Edit dropdown

B : Only users with an Admin or Power User role can access other users' reports

C : Anyone can access any reports marked as public within a shared Splunk deployment

D : The owner of the report must clone the original report and save it to their user account

Answer: A

Splunk SPLK-1001