Splunk Core Power User Exam questions with answers

Splunk Core Power User Exam questions
|\ |\ |\ |\ |\ |\




with answers
|\




Selected fields are displayed ________ each event in the
|\ |\ |\ |\ |\ |\ |\ |\ |\



results.


a. below
|\




b. interesting fields
|\ |\




c. other fields
|\ |\




d. above - CORRECT ANSWERS ✔✔a. below
|\ |\ |\ |\ |\ |\




Search terms are not case sensitive. (T/F) - CORRECT
|\ |\ |\ |\ |\ |\ |\ |\ |\



ANSWERS ✔✔True |\




These two searches will NOT return the same results.
|\ |\ |\ |\ |\ |\ |\ |\ |\




SEARCH 1:login failure SEARCH 2: "login failure" (T/F) -
|\ |\ |\ |\ |\ |\ |\ |\ |\



CORRECT ANSWERS ✔✔True |\ |\




A space is implied ______________ in a search string.
|\ |\ |\ |\ |\ |\ |\ |\




a. OR |\




b. AND|\

,c. ()
|\




d. NOT - CORRECT ANSWERS ✔✔b. AND
|\ |\ |\ |\ |\ |\




You can not specify a relative time range, such as 45
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\



seconds ago, for a search (T/F) - CORRECT ANSWERS
|\ |\ |\ |\ |\ |\ |\ |\ |\



✔✔False


To use field value data from an event in a Workflow
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\



Action, we need to: |\ |\ |\




a. Create tags for the fields.
|\ |\ |\ |\ |\




b. Select the GET method.
|\ |\ |\ |\




c. Wrap the field in dollar signs. - CORRECT ANSWERS
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\



✔✔c. Wrap the field in dollar signs.
|\ |\ |\ |\ |\ |\




This Workflow Action type sends field values to external
|\ |\ |\ |\ |\ |\ |\ |\ |\



resources.


a. POST
|\




b. GET
|\




c. Search - CORRECT ANSWERS ✔✔a. POST
|\ |\ |\ |\ |\ |\




Workflow Actions can only be applied to a single field.
|\ |\ |\ |\ |\ |\ |\ |\ |\

, FALSE
TRUE - CORRECT ANSWERS ✔✔False
|\ |\ |\ |\




Hidden fields in a data model: |\ |\ |\ |\ |\




a. will not be displayed to a Pivot user, but can be used to
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\



define other datasets
|\ |\ |\




b. will not be displayed in the dataset editor
|\ |\ |\ |\ |\ |\ |\ |\




c. will be displayed to a Pivot user that has permissions to
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\



the field - CORRECT ANSWERS ✔✔a. will not be displayed
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\



to a Pivot user, but can be used to define other datasets
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\




_____ datasets can be added to a root dataset to narrow
|\ |\ |\ |\ |\ |\ |\ |\ |\ |\ |\



down the search. |\ |\




a. event
|\




b. child
|\




c. parent
|\




d. extracted - CORRECT ANSWERS ✔✔b. child
|\ |\ |\ |\ |\ |\




Which of these are NOT Data Model dataset types:
|\ |\ |\ |\ |\ |\ |\ |\