SPLK-1001 Free Practice Test

Splunk shows data in _____ .

1. A. ASCII Character order.
2. B. Reverse chronological order.
3. C. Alphanumeric order.
4. D. Chronological order.

Correct Answer: B

Data summary button just below the search bar gives you the following (Choose three.):

1. A. Hosts
2. B. Sourcetypes
3. C. Sources
4. D. Indexes

Correct Answer: ABC

After running a search, what effect does clicking and dragging across the timeline have?

1. A. Executes a new search.
2. B. Filters current search results.
3. C. Moves to past or future events.
4. D. Expands the time range of the search.

Correct Answer: C

What must be done in order to use a lookup table in Splunk?

1. A. The lookup must be configured to run automatically.
2. B. The contents of the lookup file must be copied and pasted into the search bar.
3. C. The lookup file must be uploaded to Splunk and a lookup definition must be created.
4. D. The lookup file must be uploaded to the etc/apps/lookups folder for automatic ingestion.

Correct Answer: C

Splunk Parses data into individual events, extracts time, and assigns metadata.

1. A. False
2. B. True

Correct Answer: B