SPLK_1001 questions • Exam prepare

Exam contains 207 questions

Page 12 of 35

Question 67 🔥

Which of the following fields is stored with the events in the index?

Which database solution meets these requirements?

A. user

B. source

Highly voted

C. location

D. sourceIp

Discussion of the question

Question 68 🔥

Which of the following is the recommended way to create multiple dashboards displaying data from the same search?

Which database solution meets these requirements?

A. Save the search as a report and use it in multiple dashboards as needed.

Highly voted

B. Save the search as a dashboard panel for each dashboard that needs the data.

C. Save the search as a scheduled alert and use it in multiple dashboards as needed.

D. Export the results of the search to an XML file and use the file as the basis of the dashboards.

Discussion of the question

Question 69 🔥

What does the following specified time range do?earliest=-72h@h latest=@d

Which database solution meets these requirements?

A. Look back 3 days ago and prior.

B. Look back 72 hours, up to one day ago.

C. Look back 72 hours, up to the end of today.

D. Look back from 3 days ago, up to the beginning of today.

Highly voted

Discussion of the question

Question 70 🔥

Which events will be returned by the following search string? host=www3 status=503

Which database solution meets these requirements?

A. All events that either have a host of www3 or a status of 503.

B. All events with a host of www3 that also have a status of 503.

C. We need more information; we cannot tell without knowing the time range.

D. We need more information; a search cannot be run without specifying an index.

Discussion of the question

Question 71 🔥

What does the stats command do?

Which database solution meets these requirements?

A. Automatically correlates related fields.

B. Converts field values into numerical values.

C. Calculates statistics on data that matches the search criteria.

D. Analyzes numerical fields for their ability to predict another discrete field.

Discussion of the question

Question 72 🔥

Which search string only returns events from hostWWW3?

Which database solution meets these requirements?

A. host=*

B. host=WWW3

Highly voted

C. host=WWW*

D. Host=WWW3

Discussion of the question

Ready to Pass Your Certification Test

splunk SPLK_1001

Exam contains 207 questions

Lorem ipsum dolor sit amet consectetur. Eget sed turpis aenean sit aenean. Integer at nam ullamcorper a.

Company

Product

Resources

Follow us