QUESTION: 13

Assuming permissions are set appropriately, which REST endpoint path can be used by someone with a power user role to access information about mySearch, a saved search owned by someone with a user role?

/servicesNS/-/data/saved/searches/mySearch
/servicesNS/object/saved/searches/mySearch
/servicesNS/search/saved/searches/mySearch
/servicesNS/-/search/saved/searches/mySearch

Answer(s): D

Reference:

https://docs.splunk.com/Documentation/Splunk/8.1.2/RESTUM/RESTusing

Reveal Solution Next Question

QUESTION: 14

Using Splunk Web to modify config settings for a shared object, a revised config file with those changes is placed in which directory?

$SPLUNK_HOME/etc/apps/myApp/local
$SPLUNK_HOME/etc/system/default/
$SPLUNK_HOME/etc/system/local
$SPLUNK_HOME/etc/apps/myApp/default

Answer(s): A

Reference:

https://docs.splunk.com/Documentation/Splunk/8.1.2/Admin/Howtoeditaconfigurationfile

Reveal Solution Next Question

QUESTION: 15

What application security best practices should be adhered to while developing an app for Splunk? (Select all that apply.)

Review the OWASP Top Ten List.
Store passwords in clear text in .conf files.
Review the OWASP Secure Coding Practices Quick Reference Guide.
Ensure that third-party libraries that the app depends on have no outstanding CVE vulnerabilities.

Answer(s): A,C

Reference:

https://dev.splunk.com/enterprise/docs/developapps/testvalidate/securitybestpractices/

Reveal Solution Next Question

QUESTION: 16

There is a global search named “global_search” defined on a form as shown below:

<search id=“global_search”>
<query>
index-_internal source-*splunkd.log | stats count by component, log_level
</query>
</search>

Which of the following would be a valid post-processing search? (Select all that apply.)

| tstats count
sourcetype=mysourcetype
stats sum(count) AS count by log level
search log_level=error | stats sum(count) AS count by component

Answer(s): C,D

Reference:

https://docs.splunk.com/Documentation/Splunk/8.1.2/Viz/Savedsearches

Reveal Solution Next Question

Free SPLK-2001 Exam Braindumps (page: 5)

QUESTION: 13

Reference:

QUESTION: 14

Reference:

QUESTION: 15

Reference:

QUESTION: 16

Reference:

SPLK-2001 Discussions & Posts