PDF SPLK-1002 Study Guide

Splunk Core Certified Power User Exam Questions and Answers

Question 17

Which of these is NOT a field that is automatically created with the transaction command?

maxcount

duration

eventcount

Question 18

When multiple event types with different color values are assigned to the same event, what determines the color displayed for the events?

Rank

Weight

Priority

Precedence

Question 19

This clause is used to group the output of a stats command by a specific name.

Rex

List

Question 20

What is required for a macro to accept three arguments?

The macro's name ends with (3).

The macro's name starts with (3).

The macro's argument count setting is 3 or more.

Nothing, all macros can accept any number of arguments.