Splunk Splunk Certifications SPLK-2001 Questions & Answers

• Question 41:

  Which of the following describes a Splunk custom visualization?

  A. A visualization with custom colors.

  B. Any visualization available in Splunk.

  C. A visualization in Splunk modified by the user.

  D. A visualization that uses the Splunk Custom Visualization API.

  Correct Answer: D

  Reference: https://docs.splunk.com/Documentation/Splunk/8.1.2/AdvancedDev/CustomVizTutorial

• Question 42:

  Searching "index=_internal metrics | head 3" from Splunk Web returned the following events:

  04-12-2018 18:39:43.514 +0200 INFO Metrics ?group=thruput, name=thruput, instantaneous_kbps=0.9651774014563425, instantaneous_eps=5.645638802094809, average_kbps=1.198995639527069, total_k_processed=2676, kb=29.91796875, ev=175, load_average=3.85888671875

  04-12-2018 18:39:43.514 +0200 INFO Metrics ?group_thruput, name_syslog_output, instantaneous_kbps=0, instantaneous_eps_0, average_kbps=0, total_k_processed=0, kb=0, ev=0

  04-12-2018 18:39:43.513 +0200 INFO Metrics ?group_thruput, name_index_thruput, instantaneous_kbps=0.9651773703189551, instantaneous_eps=4.87137960922438, average_kbps=1.1985932324065556, total_k_processed=2675, kb=29.91796875, ev=151

  When the same search is required from a REST API call, which fields will be given? (Select all that apply.)

  A. _raw

  B. name

  C. sourcetype

  D. instantaneous_kbps

  Correct Answer: AC

• Question 43:

  Which Splunk REST endpoint is used to create a KV store collection?

  A. /storage/collections

  B. /storage/kvstore/create

  C. /storage/collections/config

  D. /storage/kvstore/collections

  Correct Answer: A

  Reference: https://dev.splunk.com/enterprise/docs/developapps/manageknowledge/kvstore/ usetherestapitomanagekv/

• Question 44:

  A KV store collection can be associated with a namespace for which of the following users?

  A. Nobody

  B. Users in the admin role.

  C. Users in the admin and power roles.

  D. Users in the admin, power, and splunk-system-user roles.

  Correct Answer: B

• Question 45:

  When output_mode is not used, which element of a feed is a human readable name for a returned entry?

  A. Author

  B. Title

  C. Link

  D. Id

  Correct Answer: B

  Reference: https://docs.splunk.com/Documentation/Splunk/8.1.2/RESTUM/RESTusing

• Question 46:

  When added to an app's default.meta file, which of the following makes one of its views available to other apps?

  A. export = app

  B. export = none

  C. export = view

  D. export = system

  Correct Answer: D

  Reference: https://dev.splunk.com/enterprise/docs/developapps/manageknowledge/ setpermissionsforobjects/

• Question 47:

  Which of the following are true of auto-refresh for dashboard panels? (Select all that apply.)

  A. Applies to inline searches and saved searches.

  B. Enabling auto-refresh for a report requires editing XML.

  C. Post-processing searches are refreshed when their base searches are refreshed.

  D. Each post-processing search using the same base search can have a different refresh time.

  Correct Answer: BC

• Question 48:

  Given the following two files defining app navigation, which navigation options will be displayed to the end

  user? (Select all that apply.)

  $SPLUNK_HOME/etc/apps/app_name/default/data/ui/nav/default.xml

  $SPLUNK_HOME/etc/apps/app_name/local/data/ui/nav/default/xml

  A. Search

  B. Reports

  C. Datasets

  D. Dashboards

  Correct Answer: BC

• Question 49:

  Which of the following is an example of a valid syntax for specifying an absolute time range modifier in a search?

  A. earliest=01/01/2019:00:00:00

  B. earliest=01/01/2019T00:00:00

  C. earliest=2019-01-01 00:00:00

  D. earliest=2019-01-01T00:00:00

  Correct Answer: A

  Reference: https://docs.splunk.com/Documentation/Splunk/8.1.2/Search/Specifytimemodifiersinyoursearch

• Question 50:

  Which type of command is tstats?

  A. Generating

  B. Transforming

  C. Centralized streaming

  D. Distributable streaming

  Correct Answer: A

  Reference: https://docs.splunk.com/Documentation/Splunk/8.1.2/SearchReference/Tstats