When using timechart, how many fields can be listed after a by clause? ( Choose Two )

because timechart doesn't support using a by clause.
because _time is already implied as the x-axis.
because one field would represent the x-axis and the other would represent the y-axis.
There is no limit specific to timechart.

Answer(s): B,D

To identify all of the contributing events within a transaction that contains at least one REJECT event, which syntax is correct?

Answer(s): D

Which of the following statements about data models and pivot are true? (select all that apply)

They are both knowledge objects.
Data models are created out of datasets called pivots.
Pivot requires users to input SPL searches on data models.
Pivot allows the creation of data visualizations that present different aspects of a data model.

Answer(s): B,D

Which of the following statements describes Search workflow actions?

By default. Search workflow actions will run as a real-time search.
Search workflow actions can be configured as scheduled searches,
The user can define the time range of the search when created the workflow action.
Search workflow actions cannot be configured with a search string that includes the transaction command

Answer(s): C

Free SPLK-1002 Exam Braindumps (page: 11)