SPLUNK INTRO TO DASHBOARDS QUIZ QUESTIONS

SPLUNK INTRO TO DASHBOARDS QUIZ QUESTIONS
Which data source type can only be added using the source editor?
a) ds.search
b) ds.test
c) ds.savedSearch
d) ds.chain - Answers- b) ds.test

What does a base search do?
a) The base search gathers statistics for downline processing by a chain search
b) The base search performs processing of chain search results
c) The base search performs processing of chain search results - Answers- The base
search gathers statistics for downline processing by a chain search

When using the ds.test data source type, where are columns and fields stanzas placed?
a) In the encoding stanza of the visualization
b) In the visualization stanza
c) In the data stanza under options for the data source - Answers- b) In the visualization
stanza
c) In the data stanza under options for the data source

What is the dashboard definition?
a) Text added to the top of a dashboard beneath the title
b) Five sections in the JSON source code of a Dashboard Studio dashboard
c) A .conf file that defines a dashboard - Answers- Five sections in the JSON source
code of a Dashboard Studio dashboard

Which property is required in the chart options stanza to add a color to an event
annotation?
a) annotationColor
b) annotation_time
c) annotationX - Answers- annotationColor

Which features are only available in absolute layouts?
a) Gridlines
b) Background images
c) Charts - Answers- a) Gridlines
b) Background images

What does accelerating data models do?
a) Accelerates all fields in the data model
b) Limits the search time range to 30 minutes or less
c) Creates time-series index (TSIDX) files - Answers- a) Accelerates all fields in the
data model
c) Creates time-series index (TSIDX) files