Free SPLK-1001 Exam Braindumps (page: 15)

Page 14 of 62

How do you add or remove fields from search results?

  1. Use field +to add and field -to remove.
  2. Use table +to add and table -to remove.
  3. Use fields +to add and fields ­to remove.
  4. Use fields Plus to add and fields Minus to remove.

Answer(s): C



What are the steps to schedule a report?

  1. After saving the report, click Schedule.
  2. After saving the report, click Event Type.
  3. After saving the report, click Scheduling.
  4. After saving the report, click Dashboard Panel.

Answer(s): A



By default, how long does Splunk retain a search job?

  1. 10 Minutes
  2. 15 Minutes
  3. 1 Day
  4. 7 Days

Answer(s): A



Which Boolean operator is implied between search terms, unless otherwise specified?

  1. OR
  2. AND
  3. NOT
  4. NAND

Answer(s): B






Post your Comments and Discuss Splunk® SPLK-1001 exam with other Community members:

SPLK-1001 Discussions & Posts