← Back to exam page

SPLK-1001 – Splunk Core Certified User

Loading demo links...

Showing 13–15 of 15 questions

Question 13

By default, how long does Splunk retain a search job?

Select an option, then click Submit answer.

  • ○

    10 Minutes
  • ○

    15 Minutes
  • ○

    1 Day
  • ○

    7 Days
Question 14

Which Field/Value pair will return only events found in the index named security?

Select an option, then click Submit answer.

  • ○

    index!=Security
  • ○

    Index-security
  • ○

    Index=Security
  • ○

    index=Security
Question 15

Which component of Splunk is primarily responsible for saving data?

Select an option, then click Submit answer.

  • ○

    Search Head
  • ○

    Heavy Forwarder
  • ○

    Indexer
  • ○

    Universal Forwarder