Free SPLK-1002 Exam braindumps download (SPLK-1002 exam dumps Free)

When using the transaction command, what does the argument maxspan do?

Sets the maximum total time between events in a transaction.
Sets the maximum length of all the events within a transaction.
Sets the maximum total time between the earliest and latest events in a transaction.
Sets the maximum length that any single event can reach to be included in the transaction.

Answer(s): C

https://docs.splunk.com/Documentation/Splunk/8.0.3/SearchReference/Transaction

When creating a Search workflow action, which field is required?

Answer(s): A

https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/Setupasearchworkflowaction

To identify all of the contributing events within a transaction that contain at least one REJECT event, which syntax is correct?

Answer(s): B

After manually editing a regular expression (regex), which of the following statements is true?

Changes made manually can be reverted in the Field Extractor (FX) UI.
It is no longer possible to edit the field extraction in the Field Extractor (FX) UI.
It is not possible to manually edit a regular expression (regex) that was created using the Field Extractor (FX) UI.
The Field Extractor (FX) UI keeps its own version of the field extraction in addition to the one that was manually edited.

Answer(s): B

Which of the following statements describes POST workflow actions?

Configuration of a POST workflow action includes choosing a sourcetype.
POST workflow actions can be configured to send email to the URI location.
By default, POST workflow actions are shown in both the event and field menus.
POST workflow actions can be configured to send POST arguments to the URI location.

Answer(s): D

https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/SetupaPOSTworkflowaction

Free SPLK-1002 Exam Braindumps Splunk Core Certified Power User Questions 46–50 (page: 11)