Question 1

What does the values function of the stats command do?

Options :

A : Lists all values of a given field

B : Lists unique values of a given field

C : Returns a count of unique values for a given field

D : Returns the number of events that match the search.

Answer: B

Question 2

What are the two most efficient search filters?

Options :

A : . _time and host

B : _time and index

C : host and sourcetype

D : index and sourcetype

Answer: B

Question 3

What does the stats command do?

Options :

A : Automatically correlates related fields

B : Converts field values into numerical values

C : Calculates statistics on data that matches the search criteria

D : Analyzes numerical fields for their ability to predict another discrete field

Answer: C

Question 4

What does the following specified time range do?

earliest=-72h@h latest=@d

Options :

A : Look back 3 days ago and prior

B : Look back 72 hours up to one day ago

C : Look back 72 hours, up to the end of today

D : Look back from 3 days ago up to the beginning of today

Answer: D

Question 5

Which component of Splunk is primarily responsible for saving data?

Options :

A : Search Head

B : Heavy Forwarder

C : Indexer

D : Universal Forwarder

Answer: C

Free SPLK-1001 Mock Exam – Practice Online Confidently