Splunk SPLK-1001 Practice Exams
Last updated on Apr 09,2025- Exam Code: SPLK-1001
- Exam Name: Splunk Core Certified User
- Certification Provider: Splunk
- Latest update: Apr 09,2025
Question #20
Question #22
Which of the following searches will show the number of categoryld used by each host?
- A . Sourcetype=access_* |sum bytes by host
- B . Sourcetype=access_* |stats sum(categorylD) by host
- C . Sourcetype=access_* |sum(bytes) by host
- D . Sourcetype=access_* |stats sum by host
Question #23
Which statement is true about Splunk alerts?
- A . Alerts are based on searches that are either run on a scheduled interval or in real-time.
- B . Alerts are based on searches and when triggered will only send an email notification.
- C . Alerts are based on searches and require cron to run on scheduled interval.
- D . Alerts are based on searches that are run exclusively as real-time.
Question #24
By default, all users have DELETE permission to ALL knowledge objects.
- A . True
- B . False
Question #25
It is not possible for a single instance of Splunk to manage the input, parsing and indexing of machine.
- A . True
- B . False
Question #26
Clicking a SEGMENT on a chart, ________.
- A . drills down for that value
- B . highlights the field value across the chart
- C . adds the highlighted value to the search criteria
Question #27
Which events will be returned by the following search string?
host=www3 status=503
- A . All events that either have a host of www3 or a status of 503.
- B . All events with a host of www3 that also have a status of 503
- C . We need more information: we cannot tell without knowing the time range
- D . We need more information a search cannot be run without specifying an index
Question #28
The stats command will create a _____________ by default.
- A . Table
- B . Report
- C . Pie chart
Question #29
Creating Data Models:
Fields associated with a data set are known as ______.
- A . Attributes
- B . Constraints
Question #30
What is a primary function of a scheduled report?
- A . Auto-detect changes in performance
- B . Auto-generated PDF reports of overall data trends
- C . Regularly scheduled archiving to keep disk space use low
- D . Triggering an alert in your Splunk instance when certain conditions are met