SPLK-1001 Practice Test

When an alert action is configured to run a script, Splunk must be able to locate the script. Which is one of the directories Splunk will look in to find the script?

 

 

A.

1. $SPLUNK_HOME/bin/scripts

 

B.

$SPLUNK_HOME/etc/scripts

 

C.

$SPLUNK_HOME/bin/etc/scripts

 

D.

$SPLUNK_HOME/etc/scripts/bin

When editing a dashboard, which of the following are possible options? (select all that apply)

 

 

A.

Add an output.

 

B.

Export a dashboard panel.

 

C.

Modify the chart type displayed in a dashboard panel.

 

D.

Drag a dashboard panel to a different location on the dashboard.

Which of the following index searches would provide the most efficient search performance?

 

 

A.

index=*

 

B.

index=web OR index=s*

 

C.

(index=web OR index=sales)

 

D.

*index=sales AND index=web

At index time, in which field does Splunk store the timestamp value?

A.

time

B.

EventTime

C.

timestamp

Which statement is true about the top command?

A.

It returns the top 10 results

 

B.

It displays the output in table format

 

C.

It returns the count and percent columns per row

 

D.

All of the above