Splunk SPLK-1002 Quiz 4 Topic 7 Questions 16-20

Question: 1

A field alias has been created based on an original field. A search without any transforming commands is then executed in Smart Mode. Which field name appears in the results?

ABoth will appear in the All Fields list, but only if the alias is specified in the search.

BBoth will appear in the Interesting Fields list, but only if they appear in at least 20 percent of events.

CThe original field only appears in All Fields list and the alias only appears in the Interesting Fields list.

DThe alias only appears in the All Fields list and the original field only appears in the Interesting Fields list.

Show Answer

Question: 2

Which workflow action method can be used the action type is set to link?

AGET

BPUT

CSearch

DUPDATE

Show Answer

Question: 3

Which of the following statements describe the search string below?

dacamodel Application_State All_Application_State search

AEvents will be returned from dataset named Application_state.

BEvents will be returned from the data model named Application_State.

CEvents will be returned from the data model named All_Application_state.

DNo events will be returned because the pipe should occur after the datamodel command

Show Answer

Question: 4

Based on the macro definition shown below, what is the correct way to execute the macro in search string?

q4_SPLK-1002

AConvert_sales (euro, , 79)''

BConvert_sales (euro, , .79)

CConvert_sales ($euro,$$,s79$

DConvert_sales ($euro, $$,S,79$)

Show Answer

Question: 5

Alert throttling is used to _______.

Averify each alert

Bstagger search request in a time sequenced order

Cstop spamming yourself with alerts

Dcheck severity

Show Answer

Splunk SPLK-1002 Quiz:4 Topic:7 Questions:16-20