SPLK-1002 Practice Test

Which of the following searches show a valid use of macro? (Select all that apply)

 

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Which of the following can be used with the eval command tostring function (select all that apply)

A.

‘’hex’’

B.

‘’commas’’

C.

‘’Decimal’’

D.

‘’duration’’

Based on the macro definition shown below, what is the correct way to execute the macro in search string? 

A.

Convert_sales (euro, €, 79)”

B.

Convert_sales (euro, €, .79)

C.

Convert_sales ($euro,$€$,s79$

D.

Convert_sales ($euro, $€$,S,79$)

What does the fillnull command replace null values with, it the value argument is not specified?

A.

0

B.

N/A

C.

NaN

D.

NULL

What does the Splunk Common Information Model (CIM) add-on include? (select all that apply)

A.

Custom visualizations
Pre-configured data models
Fields and event category tags
Automatic data model acceleration

B.

Pre-configured data models

C.

Fields and event category tags

D.

Automatic data model acceleration