Free Splunk SPLK-1001 Exam Dumps Questions & Answers

Which Boolean operator is always implied between two search terms, unless otherwise specified?

• A.  XOR
• B.  AND
• C.  NOT
• D.  OR

You can also specify a time range in the search bar. You can use the following for beginning and ending for a time range (Choose two.):

• A.  latest=
• B.  Not possible to specify time manually in Search query
• C.  earliest=
• D.  start=
• E.  end=

What must be done before an automatic lookup can be created? (select all that apply)

• A.  The lookup file must be verified using the inputlookup command.
• B.  The lookup command must be used.
• C.  The lookup file must be uploaded to Splunk.
• D.  The lookup definition must be created.

Matching of parentheses is a feature of Splunk Assistant.

• A.  No
• B.  Yes

Which of the following is the most efficient filter for running searches in Splunk?

• A.  Selected Fields
• B.  Fast mode
• C.  Sourcetype
• D.  Time