File Info
| Exam | Splunk Core Certified User |
| Number | SPLK-1001 |
| File Name | Splunk.SPLK-1001.TestKing.2019-05-31.27q.tqb |
| Size | 87 KB |
| Posted | May 31, 2019 |
| Download | Splunk.SPLK-1001.TestKing.2019-05-31.27q.tqb |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Which of the following Splunk components typically resides on the machines where data originates?
- Indexer
- Forwarder
- Search head
- Deployment server
Correct answer: C
Question 2
Which of the following searches would return events with failure in index netfw or warn or critical in index netops?
- (index=netfw failure) AND index=netops warn OR critical
- (index=netfw failure) OR (index=netops (warn OR critical))
- (index=netfw failure) AND (index=netops (warn OR critical))
- (index=netfw failure) OR index=netops OR (warn OR critical)
Correct answer: B
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Aboutsubsearches Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Aboutsubsearches
Question 3
Select the answer that displays the accurate placing of the pipe in the following search string:
index=security sourcetype=access_* status=200 stats count by price
- index=security sourcetype=access_* status=200 stats | count by price
- index=security sourcetype=access_* status=200 | stats count by price
- index=security sourcetype=access_* status=200 | stats count | by price
- index=security sourcetype=access_* | status=200 | stats count by price
Correct answer: A
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Aboutsubsearches Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Aboutsubsearches
