Free Splunk SPLK-1001 Exam Dumps Questions & Answers

Which is a primary function of the timeline located under the search bar?

• A.  To sort the events returned by the search command in chronological order
• B.  To show peaks and/or valleys in the timeline, which can indicate spikes in activity or downtime
• C.  To zoom in and zoom out. although this does not change the scale of the chart
• D.  To differentiate between structured and unstructured events in the data

Which of the following is true about user account settings and preferences?

• A.  Full name, time zone, and default app can be defined by clicking the login name in the Splunk bar.
• B.  Time zones are automatically updated based on the setting of the computer accessing Splunk.
• C.  Full names can only be changed by accounts with a Power User or Admin role.
• D.  Search & Reporting is the only app that can be set as the default application.

Which of the following is the recommended way to create multiple dashboards displaying data from the same search?

• A.  Export the results of the search to an XML file and use the file as the basis of the dashboards
• B.  Save the search as a dashboard panel for each dashboard that needs the data
• C.  Save the search as a scheduled alert and use it in multiple dashboards as needed
• D.  Save the search as a report and use it in multiple dashboards as needed

After running a search, what effect does clicking and dragging across the timeline have?

• A.  Moves to past or future events.
• B.  Executes a new search.
• C.  Filters current search results.
• D.  Expands the time range of the search.

You can on-board data to Splunk using following means (Choose four.):

• A.  Splunk apps and add-ons
• B.  savedsearches.conf
• C.  Splunk Web
• D.  metadata.conf
• E.  Props
• F.  inputs.conf
• G.  indexes.conf
• H.  CLI