SPLK-1001 Practice Test

SPLK-1001 Practice Test practice questions, page 3 of 9, with answer review and explanations.

Question 11

When running searches, command modifiers in the search string are displayed in what color?

  1. Red
  2. Blue
  3. Orange
  4. Highlighted

Question 12

Which of the following represents the Splunk recommended naming convention for dashboards?

  1. Description_Group_Object
  2. Group_Description_Object
  3. Group_Object_Description
  4. Object_Group_Description

Question 13

How can search results be kept longer than 7 days?

  1. By scheduling a report.
  2. By creating a link to the job.
  3. By changing the job settings.
  4. By changing the time range picker to more than 7 days.

Question 14

Which of the following is a Splunk search best practice?

  1. Filter as early as possible.
  2. Never specify more than one index.
  3. Include as few search terms as possible.
  4. Use wildcards to return more search results.

Question 15

When looking at a dashboard panel that is based on a report, which of the following is true?

  1. You can modify the search string in the panel, and you can change and configure the visualization.
  2. You can modify the search string in the panel, but you cannot change and configure the visualization.
  3. You cannot modify the search string in the panel, but you can change and configure the visualization.
  4. You cannot modify the search string in the panel, and you cannot change and configure the visualization.