Free SPLK-2001 – Splunk Certified Developer Exam Practice Test Question

Select all that apply, then click Submit answer.

• ○

  Be url-encoded.

• ○

  Specify the datatype.

• ○

  Include the bucket path.

• ○

  Include the name argument.
  
  

Select all that apply, then click Submit answer.

• ○

  Are always executed asynchronously.

• ○

  Can specify csv as an output format.

• ○

  Stream all results upon search completion.

• ○

  Can use auto_cancel to set a timeout limit.
  
  

Select all that apply, then click Submit answer.

• ○

  Convert searches to include NOT expressions.

• ○

  Restrict the time range of the search as much as possible.

• ○

  Replace | stats command with | transaction command wherever possible.

• ○

  Convert the common SPL into a Global Search and convert the other searches to post-processing searches.
  
  

Select all that apply, then click Submit answer.

• ○

  | tstats count

• ○

  sourcetype=mysourcetype

• ○

  stats sum(count) AS count by log level

• ○

  search log_level=error | stats sum(count) AS count by component
  
  

Select all that apply, then click Submit answer.

• ○

  No need to do anything, it is turned on by default.

• ○

  When a REST request is sent to create a token, the property for indexer acknowledgement must be set to 1.

• ○

  When a new HEC token is created in Splunk Web, select the checkbox labeled “Enable indexer acknowledgement”.

• ○

  When the Global Settings for HEC are updated in Splunk Web, select the checkbox labeled “Enable indexer acknowledgement”.
  
  

Select an option, then click Submit answer.

• ○

  Visualization event handler

• ○

  Form input event handler

• ○

  Condition event handler

• ○

  Search event handler
  
  

Select an option, then click Submit answer.

• ○

  A visualization with custom colors.

• ○

  Any visualization available in Splunk.

• ○

  A visualization in Splunk modified by the user.

• ○

  A visualization that uses the Splunk Custom Visualization API.
  
  

Select an option, then click Submit answer.

• ○

  Option A

• ○

  Option B

• ○

  Option C

• ○

  Option D
  

Select an option, then click Submit answer.

• ○

  Option A

• ○

  Option B

• ○

  Option C

• ○

  Option D

Select an option, then click Submit answer.

• ○

  var mypostproc1 = new PostProcessManager {{ id: “post1”, managerid: “base-search”, search: “| stats count by sourcetype” }};

• ○

  var mypostproc1 = new PostProcessManager{{ id: “post1”, managerid: “base”,
  search: “| stats count by sourcetype”
  }};

• ○

  var mypostproc1 = new PostProcess{{ id: “post1”, managerid: “base-search”,
  search: “| search stats count by sourcetype” }};

• ○

  You cannot create global searches in the Splunk Web Framework.