Question 1

A calculated field may be based on which of the following?

Options :

A : Fields generated within a search string

B : Lookup tables

C : Regular expressions

D : Extracted fields

Answer: D

Question 2

After manually editing; a regular expression (regex), which of the following statements is true?

Options :

A : Changes made manually can be reverted in the Field Extractor (FX) UI.

B : It is no longer possible to edit the field extraction in the Field Extractor (FX) UI.

C :

It is not possible to manually edit a regular expression (regex) that was created using the Field Extractor (FX) UI

D :

The Field Extractor (FX) UI keeps its own version of the field extraction in addition to the one that was manually edited.

Answer: B

Question 3

A data model consists of which three types of datasets?

Options :

A : Constraint, field, value.

B : Events, searches, transactions.

C : Field extraction, regex, delimited.

D : Transaction, session ID, metadata.

Answer: B

Question 4

When can a pipe follow a macro?

Options :

A : A pipe may always follow a macro.

B : The current user must own the macro.

C : The macro must be defined in the current app.

D : Only when sharing is set to global for the macro.

Answer: A

Question 5

What is the relationship between data models and pivots?

Options :

A : Data models provide the datasets for pivots.

B : Pivots and data models have no relationship.

C : Pivots and data models are the same thing.

D : Pivots provide the datasets for data models.

Answer: A

Higher Test Marks with Free Online SPLK-1002 Exam Practice