SPLK-1002 practice questions 181–190

1. Question 181 · 226 in bank

   When creating a search workflow action, what character(s) are used as a placeholder for field values in the search string?

   • A#
   • B$
   • C()
   • D*

   Show answer

   Answer: B

   Next question

2. Question 182 · 226 in bank

   A user wants to create a workflow action that will retrieve a specific field value from an event and run a search in a new browser window in the user's Splunk instance. What kind of workflow action should they create?

   • AA Run workflow action, because the user is running a new search with a specific field value from an event returned in the user's search.
   • BA GET workflow action, because a field value needs to be retrieved from the events returned in the user's search.
   • CA Search workflow action, because the user is running a new search with a specific field value from an event returned in the user's search.
   • DA POST workflow action, because the search is being sent to the user's current Splunk instance.

   Show answer

   Answer: C

   Next question

3. Question 183 · 226 in bank

   Which of the following is true about Pivot?

   • AUsers must use SPL to find events in a Pivot.
   • BUsers cannot create visualizations with Pivot.
   • CUsers cannot share visualizations created with Pivot.
   • DUsers can save reports from Pivot.

   Show answer

   Answer: D

   Next question

4. Question 184 · 226 in bank

   What type of data requires regular expressions (regex) for field extractions?

   • ANumeric data
   • BStructured data
   • CMetric data
   • DUnstructured data

   Show answer

   Answer: D

   Next question

5. Question 185 · 226 in bank

   Which option of the transaction command would be used to specify the maximum time between events in a transaction?

   • Aduration
   • Bmaxspan
   • Cmaxpause
   • Deventcount

   Show answer

   Answer: C

   Next question

6. Question 186 · 226 in bank

   Which of the following statements describes an event type?

   • AA knowledge object that is applied before fields are extracted.
   • BA field for categorizing events based on a search string.
   • CA log level measurement: info, warn, error.
   • DEither a log, a metric, or a trace.

   Show answer

   Answer: B

   Next question

7. Question 187 · 226 in bank

   Which of the following describes the |transaction command?

   • AIt is an SPL command that groups events together with shared values in selected fields.
   • BIt allows an exchange of data from one Splunk index to another Splunk index.
   • CIt allows an exchange of data from one Splunk system to another Splunk system.
   • DIt is an SPL command that groups at least two events together based on shared values in selected fields.

   Show answer

   Answer: A

   Next question

8. Question 188 · 226 in bank

   What is needed to define a calculated field?

   • AData model
   • BEval expression
   • CEvent type
   • DRegular expression

   Show answer

   Answer: B

   Next question

9. Question 189 · 226 in bank

   When using the timechart command, what optional argument is used to specify the interval of _time?

   • Aby
   • Bspan
   • Cbin
   • Dover

   Show answer

   Answer: B

   Next question

10. Question 190 · 226 in bank

    Ben created a macro named airport_code_translator(2). His coworker, Alice, wants to use the macro to find the name of a nearby airport. Which of the following search strings will return the results that Alice needs?

    • A"airport_code_translator(LAX, English)"
    • B'airport_code_translator(LAX, English)'
    • C$airport_code_translator(LAX, English)$
    • Dairport_code_translator(LAX, English)

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SPLK-1002 practice, question 181. 226 questions available.