CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Splunk®
  5. SPLK-1002

Free SPLK-1002 Exam Braindumps (page: 18)

Page 17 of 39
PDF with 297 Questions

The Field Extractor (FX) is used to extract a custom field. A report can be created using this custom field. The created report can then be shared with other people in the organization. If another person in the organization runs the shared report and no results are returned, why might this be? (select all that apply)

  1. Fast mode is enabled.
  2. The dashboard is private.
  3. The extraction is private-
  4. The person in the organization running the report does not have access to the index.

Answer(s): B,D



Which workflow uses field values to perform a secondary search?

  1. POST
  2. Action
  3. Search
  4. Sub-Search

Answer(s): C

Explanation:

https://docs.splunk.com/Documentation/Splunk/8.0.2/Knowledge/CreateworkflowactionsinSplunkWeb



Information needed to create a GET workflow action includes which of the following? (select all that apply.)

  1. A name of the workflow action
  2. A URI where the user will be directed at search time.
  3. A label that will appear in the Event Action menu at search time.
  4. A name for the URI where the user will be directed at search time.

Answer(s): A,B,C



In this search, __________ will appear on the y-axis. SEARCH: sourcetype=access_combined status!=200 | chart count over host

  1. status
  2. host
  3. count

Answer(s): C






Post your Comments and Discuss Splunk® SPLK-1002 exam with other Community members:

SPLK-1002 Discussions & Posts