Free SPLK-1002 sample questions

Correct answer: Search

C

Correct answer: tag:: =

Reference: https://docs.splunk.eom/Documentation/Splunk/8.0.3/Knowledge/TagandaliasfieldvaluesinSplunkWeb

Correct answer: tag:: =

Reference: https://docs.splunk.eom/Documentation/Splunk/8.0.3/Knowledge/TagandaliasfieldvaluesinSplunkWeb

Correct answer: Constraints and fields.

Reference: https://docs.splunk.eom/Documentation/SplunkLight/7.3.5/GettingStarted/Designdatamodelobjects

Correct answer: time

Reference: https://docs.splunk.eom/Documentation/Splunk/8.0.4/SearchReference/Timechart

Correct answer: The macro name is sessiontracker(2) and the arguments are action, JESSIONID.

Reference: https://docs.splunk.eom/Documentation/Splunk/8.0.3/Knowledge/Definesearchmacros

Correct answer: Both will appear in the Interesting Fields list, but only if they appear in at least 20 percent of events.

B

Correct answer: There is a 1000 event limitation with the transaction command.

Reference: https://docs.splunk.eom/Documentation/Splunk/8.0.3/SearchReference/Transaction

Correct answer: All events in a transaction must be related by one or more fields.

Reference: httDs://docs.sDlunk.com/Documentation/Splunk/8.0.3/Knowledge/Abouttransactions

Correct answers: Event types can be tagged.; Event types categorize events based on a search.

A, C -- Reference: https://www.edureka.co/blog/sijlunk-events-event-types-and-tags/

A, C -- Reference: https://www.edureka.co/blog/sijlunk-events-event-types-and-tags/