SPLK-1002 Splunk Core Certified Power User Exam

Loading demo links...

Showing 4–6 of 10 questions

Question 4

Which of the following statements describe the search below? (Choose all that apply.)

index=main | transaction clientip host maxspan=30s maxpause=5s

Select all that apply, then click Submit answer.

  • Events in the transaction occurred within 5 seconds.

  • It groups events that share the same clientip and host.

  • The first and last events are no more than 5 seconds apart.

  • The first and last events are no more than 30 seconds apart

Question 5

Information needed to create a GET workflow action includes which of the following? (Choose all that apply.)

Select all that apply, then click Submit answer.

  • A name for the workflow action.

  • A URI where the user will be directed at search time.

  • A label that will appear in the Event Action menu at search time.

  • A name for the URI where the user will be directed at search time.

Question 6

Which of the following searches will return events containing a tag named Privileged?

Select an option, then click Submit answer.

  • tag=Priv

  • tag=Priv*

  • tag=priv*

  • tag=privileged