SPLUNK EXAM WITH QUESTIONS AND 100% CORRECT
ANSWERS LATEST UPDATE
Which of the following arguments can you use with the timechart command to state how
much time range to use when ordering events?
(A) range
(B) timespan
(C) span
(D) timerange - Answer (C) span
Which of the following columns is the x-axis values in a single series data table for a
visualization?
(A) The first column
(B) The third column
(C) The fourth column
(D) The second column - Answer (A) The first column
Which of the following commands with arguments to the geostats command limits the
number of columns?
A. longfield
B. collimit
C. latfield
D. globallimit - Answer: D globallimit
,By default, how many columns does a visualization display when the chart is running?
A. 5
B. 20
C. 10
D. 3 - Answer: C 10
Which of the following clauses for the rare command allows for specification of whether
or not a column for percentages is created?
A. showperc
B. displayperc
C. percentage
(D) perccol - Answer (A) showperc
What is the command to remove duplicate field values in search results?
(A) exclude
(B) remove
(C) dedup
(D) fields - Answer (C) dedup
What clause do you use with the top command to indicate a number of values returned?
(A) resultcount
(B) return
(C) values
,(D) limit - Answer (D) limit
What is the optional argument of the addtotals command that changes the label for row
totals in a table?
(A) rowlabel
(B) label
(C) fieldname
(D) fieldformat - Answer (B) label
Which of the following clauses can you use with the top command to rename the column
containing the count?
A) countfield
B) countname
C) colname
D) colheader - Answer: D) colheader
Which of the following commands excludes fields from results?
A) remove
B) dedup
C) exclude
D) fields - Answer: D) fields
Which command formats the value of field?
A) fieldformat
, B) format
C) rename
D) fields - Answer: A) fieldformat
How do you reorder columns in a table?
A) Using drag and drop in the table interface
B) Using the order of fields listed in the fields command
C) Using an option to "Move column" when clicking a column header's dropdown
D) Using the order of fields listed in the table command - Answer B) Using the order of
fields listed in the fields command
What type of default map visualization uses shading for relative metrics?
A) Choropleth Map
(B) Marker Map
(C) Cluster Map
(D) Shading Map - Answer (A) Choropleth Map
When using the timechart command, which axis represents time?
(A) Y-axis
(B) The axis is specified using the by clause
(C) X-axis
(D) The axis is specified using the as clause - Answer
Which of the following commands can return a count of all events matching search
criteria over a specified time period?
ANSWERS LATEST UPDATE
Which of the following arguments can you use with the timechart command to state how
much time range to use when ordering events?
(A) range
(B) timespan
(C) span
(D) timerange - Answer (C) span
Which of the following columns is the x-axis values in a single series data table for a
visualization?
(A) The first column
(B) The third column
(C) The fourth column
(D) The second column - Answer (A) The first column
Which of the following commands with arguments to the geostats command limits the
number of columns?
A. longfield
B. collimit
C. latfield
D. globallimit - Answer: D globallimit
,By default, how many columns does a visualization display when the chart is running?
A. 5
B. 20
C. 10
D. 3 - Answer: C 10
Which of the following clauses for the rare command allows for specification of whether
or not a column for percentages is created?
A. showperc
B. displayperc
C. percentage
(D) perccol - Answer (A) showperc
What is the command to remove duplicate field values in search results?
(A) exclude
(B) remove
(C) dedup
(D) fields - Answer (C) dedup
What clause do you use with the top command to indicate a number of values returned?
(A) resultcount
(B) return
(C) values
,(D) limit - Answer (D) limit
What is the optional argument of the addtotals command that changes the label for row
totals in a table?
(A) rowlabel
(B) label
(C) fieldname
(D) fieldformat - Answer (B) label
Which of the following clauses can you use with the top command to rename the column
containing the count?
A) countfield
B) countname
C) colname
D) colheader - Answer: D) colheader
Which of the following commands excludes fields from results?
A) remove
B) dedup
C) exclude
D) fields - Answer: D) fields
Which command formats the value of field?
A) fieldformat
, B) format
C) rename
D) fields - Answer: A) fieldformat
How do you reorder columns in a table?
A) Using drag and drop in the table interface
B) Using the order of fields listed in the fields command
C) Using an option to "Move column" when clicking a column header's dropdown
D) Using the order of fields listed in the table command - Answer B) Using the order of
fields listed in the fields command
What type of default map visualization uses shading for relative metrics?
A) Choropleth Map
(B) Marker Map
(C) Cluster Map
(D) Shading Map - Answer (A) Choropleth Map
When using the timechart command, which axis represents time?
(A) Y-axis
(B) The axis is specified using the by clause
(C) X-axis
(D) The axis is specified using the as clause - Answer
Which of the following commands can return a count of all events matching search
criteria over a specified time period?
