← Back to exam page

SPLK-1002 – Splunk Core Certified Power User Exam

Loading demo links...

Showing 1–3 of 10 questions

Question 1

What does the Splunk Common Information Model (CIM) add-on include? (Choose all that apply.)

Select all that apply, then click Submit answer.

  • ○

    Custom visualizations
  • ○

    Pre-configured data models
  • ○

    Fields and event category tags
  • ○

    Automatic data model acceleration
Question 2

Which of the following statements about macros is true? (Choose all that apply.)

Select all that apply, then click Submit answer.

  • ○

    Arguments are defined at execution time.
  • ○

    Arguments are defined when the macro is created.
  • ○

    Argument values are used to resolve the search string at execution time.
  • ○

    Argument values are used to resolve the search string when the macro is created.
Question 3

Data models are composed of one or more of which of the following datasets? (Choose all that apply.)

Select all that apply, then click Submit answer.

  • ○

    Events datasets
  • ○

    Search datasets
  • ○

    Transaction datasets
  • ○

    Any child of event, transaction, and search datasets