SPLK-1001 Practice Test

What happens when a field is added to the Selected Fields list in the fields sidebar'?

 

A.

Splunk will re-run the search job in Verbose Mode to prioritize the new Selected Fi

B.

Splunk will highlight related fields as a suggestion to add them to the Selected Fields list.

C.

Custom selections will replace the Interesting Fields that Splunk populated into the list at search time

D.

The selected field and its corresponding values will appear underneath the events in the search results

By default, which of the following is a Selected Field?

 

 

A.

action

 

B.

clientip

 

C.

categoryld

 

D.

sourcetype

 

According  to  Splunk  best  practices,  which  placement  of  the  wildcard  results  in  the  most  efficient search?

 

 

A.

f*iI 

B.

*fail 

C.

fail* 

D.

 'fail

Which command automatically returns percent and count columns when executing searches?

 

 

A.

top

B.

stats

C.

table

D.

percent

Which of the following describes lookup files?

 

 

A.

1. Lookup fields cannot be used in searches

 

B.

Lookups contain static data available in the index

 

C.

Lookups add more fields to results returned by a search

 

D.

Lookups pull data at index time and add them to search results