Question 1

For the following search, which field populates the x-axis? index=security sourcetype=linux secure | timechart count by action

Options :

A : action

B : source type

C : _time

D : time

Answer: C

Question 2

Which tool uses data models to generate reports and dashboard panels without using SPL?

Options :

A : Visualization tab

B : Pivot

C : Datasets

D : splunk CIM

Answer: B

Question 3

A data model consists of which three types of datasets?

Options :

A : Constraint, field, value.

B : Events, searches, transactions.

C : Field extraction, regex, delimited.

D : Transaction, session ID, metadata.

Answer: B

Question 4

When would transaction be used instead of stats?

Options :

A :

To group events based on a single field value.

B :

To see results of a calculation.

C :

To have a faster and more efficient search.

D :

To group events based on start/end values.

Answer: D

Question 5

When using a field value variable with a Workflow Action, which punctuation mark will escape the data

Options :

A : *

B : !

C : ^

D : #

Answer: B

Free SPLK-1002 Mock Exam – Practice Online Confidently