Online Access Free SPLK-1001 Practice Test

A collection of items containing things such as data inputs, UI elements, and knowledge objects is known as what?

• A.A role
• B.An enhanced solution
• C.JSON
• D.An app

Which of the following searches will return results where fail, 400, and error exist in every event?

• A.error AND (fail OR 400)
• B.error OR (fail and 400)
• C.error OR fail OR 400
• D.error AND (fail AND 400)

Splunk Parses data into individual events, extracts time, and assigns metadata.

• A.False
• B.True

Splunk internal fields contains general information about events and starts from underscore i.e. _ .

• A.False
• B.True

Which of the following are not true about lookups? (Select all that apply.)

• A.Splunk DB Connect can be used to populate a lookup table from relational databases
• B.Search results can be used to populate a lookup table
• C.Output from a script can be used to populate a lookup table
• D.Lookups can be time based
• E.Lookup have a 10mg maximum size limit