SPLK-1002 Reviews Questions

Splunk Core Certified Power User Exam Questions and Answers

Question 21

When using | timechart by host, which field is represented in the x-axis?

date

host

time

_time

Question 22

What is a limitation of searches generated by workflow actions?

Searches generated by workflow action cannot use macros.

Searches generated by workflow actions must be less than 256 characters long.

Searches generated by workflow action must run in the same app as the workflow action.

Searches generated by workflow action run with the same permissions as the user running them.

Question 23

Where are the results of eval commands stored?

In a field.

In an index.

In a KV Store.

In a database.

Question 24

What does the fillnull command do in this search?

index=main sourcetype=http:log | fillnull value="Unknown"

Set the values of the field to null when it is "Unknown".

Set all fields that are null to "Unknown".

Set the values of the field to "Unknown" if it is null.

Set all fields with the value of "Unknown" to null.