Question 1

The command shown here does witch of the following: Command: |outputlookup products.csv

Options :

A : Writes search results to a file named products.csv

B : Returns the contents of a file named products.csv

Answer: A

Question 2

A collection of items containing things such as data inputs, UI elements, and knowledge objects is known as what?

Options :

A : An app

B : JSON

C : A role

D : An enhanced solution

Answer: A

Question 3

Which search string returns a filed containing the number of matching events and names that field Event Count?

Options :

A : index=security failure | stats sum as “Event Count”

B : index=security failure | stats count as “Event Count”

C : index=security failure | stats count by “Event Count”

D : index=security failure | stats dc(count) as “Event Count”

Answer: B

Question 4

Which component of Splunk is primarily responsible for saving data?

Options :

A : Search Head

B : Heavy Forwarder

C : Indexer

D : Universal Forwarder

Answer: C

Question 5

Query - status != 100:

Options :

A : Will return event where status field exist but value of that field is not 100.

B : Will return event where status field exist but value of that field is not 100 and all events where status field doesn't exist.

C : Will get different results depending on data

Answer: A

Higher Test Marks with Free Online SPLK-1001 Exam Practice