SPLK-2001 Free Practice Test

Log files related to Splunk REST calls can be found in which indexes? (Select all that apply.)

1. A. _audit
2. B. _internal
3. C. _thefishbucket
4. D. _blocksignature

Correct Answer: AB

The response message from a successful Splunk REST call includes an element. What is contained in an element?

1. A. A dictionary of <eai:acl> elements.
2. B. Metadata encapsulating the element.
3. C. A response code indicating success or failure.
4. D. An individual element in an collection.

Correct Answer: B

When the search/jobs REST endpoint is called to execute a search, what can be done to reduce the results size in the results? (Select all that apply.)

1. A. Use a generating search.
2. B. Remove unneeded fields.
3. C. Truncate the data, using selective functions.
4. D. Summarize data, using analytic commands.

Correct Answer: AB

In a DELETE request, what would omitting the value of _key from the REST endpoint do?

1. A. Clean the KV store, deleting all content.
2. B. Produce the syntax error ??Key value missing??.
3. C. Cause all records in a collection to be deleted.
4. D. Mean that the _key value must be passed as an argument.

Correct Answer: C

Suppose the following query in a Simple XML dashboard returns a table including hyperlinks:

1. A. <option name ??link.openSearch.viewTarget">$row.link$</option>
2. B. <link target=?? blank">$$row.link$$</link>
3. C. <link target="_blank">$row.link|n$</link>
4. D. <link target ??_blank">http://localhost:8000/debug/refresh</link>

Correct Answer: A