Splunk - Core Power User Exam – DUMP
|Questions Solved 100% Correct
Which are valid ways to create an event type? (select all that apply)
A. By using the searchtypes command in the search bar.
B. By editing the event_type stanza in the props.conf file.
C. By going to the Settings menu and clicking Event Types > New.
D. By selecting an event in search results and clicking Event Actions > Build Event Type. -
Answer ANSWER: CD
A calculated field maybe based on which of the following?
A. Lookup tables
B. Extracted fields
C. Regular expressions
D. Fields generated within a search string - Answer ANSWER: B
Data model are composed of one or more of which of the fo-owing datasets? (select all
that apply.)
,A. Events datasets
B. Search datasets
C. Transaction datasets
D. Any child of event, transaction, and search datasets - Answer ANSWER: ABC
What is required for a macro to accept three arguments?
A. The macro's name ends with (3).
B. The macro's name starts with (3).
C. The macro's argument count setting is 3 or more.
D. Nothing, all macros can accept any number of arguments. - Answer ANSWER: A
If a search returns ____________ it can be viewed as a chart.
A. timestamps
B. statistics
C. events
D. keywords - Answer ANSWER: B
When should transaction be used?
A. Only in a large distributed Splunk environment.
B. When calculating results from one or more fields.
C. When event grouping is based on start/end values.
D. When grouping events results in over 1000 events in each group. - Answer ANSWER: C
, Book saying D
Verified
When a search returns __________, you can view the results as a list.
A. a list of events
B. transactions
C. statistical values - Answer ANSWER: C
Highlighted search terms indicate _________ search results in Splunk.
A. Display as selected fields.
B. Sorted
C. Charted based on time
D. Matching - Answer ANSWER: D
Which statement is true?
A. Pivot is used for creating datasets.
B. Data model are randomly structured datasets.
C. Pivot is used for creating reports and dashboards.
D. In most cases, each Splunk user will create their own data model. - Answer ANSWER: C
This role is required to install the CIM Add-on. Select your answer.
A. ADMIN
|Questions Solved 100% Correct
Which are valid ways to create an event type? (select all that apply)
A. By using the searchtypes command in the search bar.
B. By editing the event_type stanza in the props.conf file.
C. By going to the Settings menu and clicking Event Types > New.
D. By selecting an event in search results and clicking Event Actions > Build Event Type. -
Answer ANSWER: CD
A calculated field maybe based on which of the following?
A. Lookup tables
B. Extracted fields
C. Regular expressions
D. Fields generated within a search string - Answer ANSWER: B
Data model are composed of one or more of which of the fo-owing datasets? (select all
that apply.)
,A. Events datasets
B. Search datasets
C. Transaction datasets
D. Any child of event, transaction, and search datasets - Answer ANSWER: ABC
What is required for a macro to accept three arguments?
A. The macro's name ends with (3).
B. The macro's name starts with (3).
C. The macro's argument count setting is 3 or more.
D. Nothing, all macros can accept any number of arguments. - Answer ANSWER: A
If a search returns ____________ it can be viewed as a chart.
A. timestamps
B. statistics
C. events
D. keywords - Answer ANSWER: B
When should transaction be used?
A. Only in a large distributed Splunk environment.
B. When calculating results from one or more fields.
C. When event grouping is based on start/end values.
D. When grouping events results in over 1000 events in each group. - Answer ANSWER: C
, Book saying D
Verified
When a search returns __________, you can view the results as a list.
A. a list of events
B. transactions
C. statistical values - Answer ANSWER: C
Highlighted search terms indicate _________ search results in Splunk.
A. Display as selected fields.
B. Sorted
C. Charted based on time
D. Matching - Answer ANSWER: D
Which statement is true?
A. Pivot is used for creating datasets.
B. Data model are randomly structured datasets.
C. Pivot is used for creating reports and dashboards.
D. In most cases, each Splunk user will create their own data model. - Answer ANSWER: C
This role is required to install the CIM Add-on. Select your answer.
A. ADMIN
