Free Splunk SPLK-2001 Exam Dumps Questions & Answers

Data can be added to a KV store collection in which of the following format(s)?

• A.  JSON, XML, CSV, TXT
• B.  JSON
• C.  JSON, XML
• D.  JSON, XML, CSV

Which of the following are types of event handlers? (Select all that apply.)

• A.  Search
• B.  Set token
• C.  Form input
• D.  Visualization

Which of the following is a way to monitor app performance? (Select all that apply.)

• A.  Using the search job inspector.
• B.  Using the Monitoring Console.
• C.  Using the storage/collections/config REST endpoint.
• D.  Using Splunk logs.

Suppose the following query in a Simple XML dashboard returns a table including hyperlinks:
<search>
<query>index news sourcetype web_proxy | table sourcetype title link
</query>
</search>
Which of the following is a valid dynamic drilldown element to allow a user of the dashboard to visit the hyperlinks contained in the link field?

• A.  <drilldown>
  <link target="_blank">$row.link|n$</link>
  </drilldown>
• B.  <option name "link.openSearch.viewTarget">$row.link$</option>
• C.  <drilldown>
  <link target=" blank">$$row.link$$</link>
  </drilldown>
• D.  <drilldown>
  <link target "_blank">http://localhost:8000/debug/refresh</link>
  </drilldown>

A fellow Splunk administrator is reviewing an app that has been downloaded from splunkbase and deployed in an organization. The admin has e-mailed the following configuration snippet with a brief note that says "fix the permissions".
In what configuration file should the snippet be placed?
[]
access = read : [ * ], write : [ admin ] export - system
(Assume that $APP_HOME refers to the path that the app is installed, e.g. $SPLUNK_HOME/etc/apps/<app name>)

• A.  $APP_HOME/metadata/local.meta
• B.  $APP_HOME/default/app.conf
• C.  $APP_HOME/local/default.meta
• D.  $SPLUNK_HOME/etc/system/local/server.conf