SPLK-1002 pdf, SPLK-1002 questions, SPLK-1002 dump pdf, SPLK-1002 exam, Splunk SPLK-1002 exam questions
                     Splunk
SPLK-1002
Splunk Core Certified
Power User Exam
[ Total Questions: 10]
Splunk - SPLK-1002
Topic 2, Questions Set 2
Question #:1 - (Exam Topic 2)
The time range specified for a historical search defines the ____________ .------questionable on ans
A.  Amount of data shown on the timeline as data streams in
B.  Amount of data fetched from index matching that time range
C.  Time range for the static results
Answer: B
Question #:2 - (Exam Topic 2)
A real-time alert is ______________.
A.  A scheduled alert
B.  constantly running in the background
Answer: B
Question #:3 - (Exam Topic 2)
When using a field value variable with a Workflow Action, which punctuation mark will escape the data
A.  *
B.  !
C.  ^
D.  #
Answer: B
Question #:4 - (Exam Topic 2)
We can use the rename command to _____ (Select all that apply.)
A.  Change indexed fields
B.  Exclude fields from our search results
2 of 5
Splunk - SPLK-1002
C.  Extract new fields from our data using regular expressions
D.  Give a field a new name at search time
Answer: D
Question #:5 - (Exam Topic 2)
Which of the following about reports is/are true?
A.  Reports are knowledge objects.
B.  Reports can be scheduled.
C.  Reports can run a script.
D.  All of the above.
Answer: D
3 of 5
Splunk - SPLK-1002
Topic 1, Main Questions
Question #:6 - (Exam Topic 1)
What is the correct syntax to search for a tag associated with a value on a specific fiedsd?
A.  Tag-