Question 1

Which of the following is the correct way to use the data model command to search field in the data model within the web dataset?

Options :

A : | datamodel web search | filed web *

B : | Search datamodel web web | filed web*

C : | datamodel web web field | search web*

D : Datamodel=web | search web | filed web*

Answer: A

Question 2

For choropleth maps,splunk ships with the following KMZ files (select all that apply)

Options :

A : States of the United States

B : States and provinces of the united states and Canada

C : Countries of the European Union

D : Countries of the World

Answer: A,D

Question 3

To which of the following can a field alias be applied?

Options :

A :

Data found in a lookup table.

B :

Either a calculated field or an extracted field.

C :

Only one single field in a dataset.

D :

A given host, source, or sourcetype.

Answer: B

Question 4

The eval command 'if' function requires the following three arguments (in order):

Options :

A : Boolean expression, result if true, result if false

B : Result if true, result if false, boolean expression

C : Result if false, result if true, boolean expression

D : Boolean expression, result if false, result if true

Answer: A

Question 5

The gauge command:

Options :

A : creates a single-value visualization

B : allows you to set colored ranges for a single-value visualization

C : creates a radial gauge visualization

Answer: B

Higher Test Marks with Free Online SPLK-1002 Exam Practice