File Info
| Exam | Splunk Core Certified User |
| Number | SPLK-1001 |
| File Name | Splunk.SPLK-1001.ActualTests.2020-04-24.119q.tqb |
| Size | 338 KB |
| Posted | Apr 24, 2020 |
| Download | Splunk.SPLK-1001.ActualTests.2020-04-24.119q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Which search string only returns events from hostWWW3?
- host=*
- host=WWW3
- host=WWW*
- Host=WWW3
Correct answer: B
Question 2
By default, how long does Splunk retain a search job?
- 10 Minutes
- 15 Minutes
- 1 Day
- 7 Days
Correct answer: A
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Extendjoblifetimes Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Extendjoblifetimes
Question 3
When writing searches in Splunk, which of the following is true about Booleans?
- They must be lowercase.
- They must be uppercase.
- They must be in quotations.
- They must be in parentheses.
Correct answer: B
