Which of the following Statements about macros is true? (select all that apply)
Correct Answer: B,D
Question 137
Which of the following statements describes the command below (select all that apply) sourcetype-access_combined | transaction JSESSIONID
Correct Answer: C,D
Question 138
Which workflow action method can be used the action type is set to link?
Correct Answer: A
https://docs.splunk.com/Documentation/Splunk/8.0.2/Knowledge/SetupaGETworkflowaction Define a GET workflow action Steps Navigate to Settings > Fields > Workflow Actions. Click New to open up a new workflow action form. Define a Label for the action. The Label field enables you to define the text that is displayed in either the field or event workflow menu. Labels can be static or include the value of relevant fields. Determine whether the workflow action applies to specific fields or event types in your data. Use Apply only to the following fields to identify one or more fields. When you identify fields, the workflow action only appears for events that have those fields, either in their event menu or field menus. If you leave it blank or enter an asterisk the action appears in menus for all fields. Use Apply only to the following event types to identify one or more event types. If you identify an event type, the workflow action only appears in the event menus for events that belong to the event type. For Show action in determine whether you want the action to appear in the Event menu, the Fields menus, or Both. Set Action type to link. In URI provide a URI for the location of the external resource that you want to send your field values to. Similar to the Label setting, when you declare the value of a field, you use the name of the field enclosed by dollar signs. Variables passed in GET actions via URIs are automatically URL encoded during transmission. This means you can include values that have spaces between words or punctuation characters. Under Open link in, determine whether the workflow action displays in the current window or if it opens the link in a new window. Set the Link method to get. Click Save to save your workflow action definition.
Question 139
Information needed to create a GET workflow action includes which of the following? (select all that apply.)
Correct Answer: A,B,C
Reference: Information needed to create a GET workflow action includes the following: a name of the workflow action, a URI where the user will be directed at search time, and a label that will appear in the Event Action menu at search time. A GET workflow action is a type of workflow action that performs a GET request when you click on a field value in your search results. A GET workflow action can be configured with various options, such as: A name of the workflow action: This is a unique identifier for the workflow action that is used internally by Splunk. The name should be descriptive and meaningful for the purpose of the workflow action. A URI where the user will be directed at search time: This is the base URL of the external web service or application that will receive the GET request. The URI can include field value variables that will be replaced by the actual field values at search time. For example, if you have a field value variable ip, you can write it as http://example.com/ip=$ip to send the IP address as a parameter to the external web service or application. A label that will appear in the Event Action menu at search time: This is the display name of the workflow action that will be shown in the Event Action menu when you click on a field value in your search results. The label should be clear and concise for the user to understand what the workflow action does. Therefore, options A, B, and C are correct.
