Which of the following statements are correct about Search & Reporting App? (Choose three.)
A. Can be accessed by Apps > Search & Reporting.
B. Provides default interface for searching and analyzing logs.
C. Enables the user to create knowledge object, reports, alerts and dashboards.
D. It only gives us search functionality.
What are the two most efficient search filters?
A. _time and host
B. _time and index
C. host and sourcetype
D. index and sourcetype
Explanation: This is the correct answer because these two filters can help you limit the amount of data that Splunk retrieves from disk, which is the key to fast searching1. The _time filter allows you to specify a narrow time window for your search, which reduces the number of buckets that Splunk scans2. The index filter allows you to specify which index or indexes contain the data that you want to search, which reduces the number of files that Splunk reads3.
Which command will rename action to Customer Action?
A. | rename action = CustomerAction
B. | rename Action as “Customer Action”
C. | rename Action to “Customer Action”
D. | rename action as “Customer Action”
When is an alert triggered?
A. When Splunk encounters a syntax error in a search
B. When a trigger action meets the predefined conditions
C. When an event in a search matches up with a data model
D. When results of a search meet a specifically defined condition
!= and NOT are same arguments.
A. True
B. False
Monitor option in Add Data provides _______________.
A. Only continuous monitoring
B. Only One-time monitoring.
C. None of the above.
D. Both One-time and continuous monitoring
Which events will be returned by the following search string?
host=www3 status=503
A. All events that either have a host of www3 or a status of 503.
B. All events with a host of www3 that also have a status of 503
C. We need more information: we cannot tell without knowing the time range
D. We need more information a search cannot be run without specifying an index
Page 7 out of 35 Pages |
Splunk SPLK-1001 Dumps Home | Previous |