Labour Day Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

PDF SPLK-1002 Study Guide

Page: 5 / 19
Total 257 questions

Splunk Core Certified Power User Exam Questions and Answers

Question 17

This function of the stats command allows you to identify the number of values a field has.

Options:

A.

max

B.

distinct_count

C.

fields

D.

count

Question 18

What approach is recommended when using the Splunk Common Information Model (CIM) add-on to normalize data?

Options:

A.

Consult the CIM data model reference tables.

B.

Run a search using the authentication command.

C.

Consult the CIM event type reference tables.

D.

Run a search using the correlation command.

Question 19

When extracting fields, we may choose to use our own regular expressions

Options:

A.

True

B.

False

Question 20

Information needed to create a GET workflow action includes which of the following? (select all that apply.)

Options:

A.

A name of the workflow action

B.

A URI where the user will be directed at search time.

C.

A label that will appear in the Event Action menu at search time.

D.

A name for the URI where the user will be directed at search time.

Page: 5 / 19
Total 257 questions