SPLK 1002 EXAM (core certified power user) with Questions and 100% Correct Answers

SPLK 1002 EXAM (core certified power user ) with Questions and 100% Correct Answers When creating a data model, w hich of the following is true? - Answer As the title is entered an ID is automatically generated. What is a data model? - Answer - A knowledge object that applies structure to raw data making it easier to use - each model designed to represent a specific category of event data. -can be accelerated to allow splunk to query summary of data - are hierarch ally structured data sets which may contain events, searches and transactions. - knowledge objects that provide the data structure that drives pivots How does Pivot use data models? - Answer To generate reports and dashboard panels. What are data sets? - Answer Smaller collections of data defined for specific pupose. How many types of data sets are there? - Answer Three. Event data set, search data set, transaction data set. Event data set - Answer a search that DOES NOT contain a transforming command o r a pipe to command Search data set - Answer any search that DOES contain a pipe to or transforming command. Transaction data set - Answer contains a transaction command What does each data set contain? - Answer A set of constraints and fields What occ urs when setting a field flag to Hidden? - Answer The field is not displayed to Pivot users when they select the dataset in Pivot. True of False: You can only split a pivot with a maximum of one row or column. - Answer false By default, the sort command lists results in __________ order. - Answer ascending Data models contain the following. - Answer constraints inherited and extracted fields event object hierarchy Which of the following do all event datasets contain? - Answer Constraints Fields Which of the following accurately describes data models? - Answer Can be used by the Pivot interface to generate reports and dashboard panels A knowledge object that applies information structure to raw data Which of the following accurately describes pivots? - Answer Quick way to design visualizations of data using Splunk Web Alternate method to access data without using search language Requires use of datasets What do Piv ots require to create visualizations in Splunk? - Answer data models What is required to configure persistent data model acceleration? - Answer A user role with the accelerate_datamodel capability or admin role To add a Root Event Dataset, what field is required to be manually added? - Answer Dataset Name What functionality is provided to allow collaboration with other Splunk users to create, modify or test data models? - Answer Downloading and uploading data models True or False: A constraint inherited by the children dataset from the parent dataset can be removed. - Answer false When adding fields to a dataset, which of the following creates a new field based on an expression that you define? - Answer Eval Expression To perform a secondary search, us e a _______ workflow action - Answer search Which of the following are ways you can create an event type. - Answer Retrieves information from an external source Sends field values to an external source Uses field values to perform a secondary search Which statement best describes the function of a Workflow Action - Answer Creates links within events that interact with external resources or narrows down our search