Question 1

Where can wildcards be used in the tstats command?

Options :

A : No wildcards can be used with

B : In the where to clause.

C : In the from clause.

D : In the by clause.

Answer: C

Question 2

Which of the following cannot be accomplished with a webhook alert action?

Options :

A : Retrieve data from a web page

B : Create a ticket in a support app

C : Post a notification on a web page

D : Post a message in a chatroom

Answer: A

Question 3

Which of the following is true about a KV Store Collection when using it as a lookup?

Options :

A :

Each collection must have at least 3 fields, one of which needs to match values of a field in your event data

B :

Each collection must have at least 2 fields, one of which needs to match values of a field in your event data.

C :

Each collection must have at least 2 fields, none of which need to match values of a field in your event data.

D :

Each collection must have at least 3 fields, none of which need to match values of a field in your event data.

Answer: B

Question 4

Which predefined drilldown token passes a clicked value from a table row?

Options :

A :

B :

C :

D :

Answer: A

Question 5

Which of the following would exclude all entries contained in the lookup file baditems. csv from search results?

Options :

A : NOT [inputlookup baditems.csv]

B : NOT (lookup baditems.csv OUTPUT item)

C : WHERE item NOT IN (baditems.csv)

D : [NOT inputlookup baditems.csv]

Answer: A

Higher Test Marks with Free Online SPLK-1004 Exam Practice