SPLK-1001 Practice Test

SPLK-1001 Practice Test practice questions, page 7 of 9, with answer review and explanations.

Question 31

When an alert action is configured to run a script, Splunk must be able to locate the script. Which is one of the directories Splunk will look in to find the script?

  1. $SPLUNK_HOME/bin/scripts
  2. $SPLUNK_HOME/etc/scripts
  3. $SPLUNK_HOME/bin/etc/scripts
  4. $SPLUNK_HOME/etc/scripts/bin

Question 32

Which Boolean operator is always implied between two search terms, unless otherwise specified?

  1. OR
  2. NOT
  3. AND
  4. XOR

Question 33

What does the values function of the stats command do?

  1. Lists all values of a given field.
  2. Lists unique values of a given field.
  3. Returns a count of unique values for a given field.
  4. Returns the number of events that match the search.

Question 34

Which stats command function provides a count of how many unique values exist for a given field in the result set?

  1. dc(field)
  2. count(field)
  3. count-by(field)
  4. distinct-count(field)

Question 35

A collection of items containing things such as data inputs, UI elements, and knowledge objects is known as what?

  1. An app
  2. JSON
  3. A role
  4. An enhanced solution