Question 1

How can another user gain access to a saved report?

Options :

A : The owner of the report can edit permissions from the Edit dropdown

B : Only users with an Admin or Power User role can access other users' reports

C : Anyone can access any reports marked as public within a shared Splunk deployment

D : The owner of the report must clone the original report and save it to their user account

Answer: A

Question 2

Splunk automatically determines the source type for major data types.

Options :

A : False

B : True

Answer: B

Question 3

What does the values function of the stats command do?

Options :

A : Lists all values of a given field

B : Lists unique values of a given field

C : Returns a count of unique values for a given field

D : Returns the number of events that match the search.

Answer: B

Question 4

What is the proper SPL terminology for specifying a particular index in a search?

Options :

A : indexer—index_name

B : indexer name—index_name

C : index=index_name

D : index name=index_name

Answer: C

Question 5

Which statement is true about Splunk alerts?

Options :

A : Alerts are based on searches that are either run on a scheduled interval or in real-time.

B : Alerts are based on searches and when triggered will only send an email notification.

C : Alerts are based on searches and require cron to run on scheduled interval.

D : Alerts are based on searches that are run exclusively as real-time.

Answer: A

Higher Test Marks with Free Online SPLK-1001 Exam Practice