Splunk SPLK-1002 Quiz 4 Topic 7 Questions 16-20

Question: 1

A field alias has been created based on an original field. A search without any transforming commands is then executed in Smart Mode. Which field name appears in the results?

ABoth will appear in the All Fields list, but only if the alias is specified in the search.

BBoth will appear in the Interesting Fields list, but only if they appear in at least 20 percent of events.

CThe original field only appears in All Fields list and the alias only appears in the Interesting Fields list.

DThe alias only appears in the All Fields list and the original field only appears in the Interesting Fields list.

Show Answer

Question: 2

Which workflow action method can be used the action type is set to link?

AGET

BPUT

CSearch

DUPDATE

Show Answer

Question: 3

Which of the following knowledge objects represents the output of an oval expression?

AEval fields

BCalculated fields

CField extractions

DCalculated lookups

Show Answer

Question: 4

What does the following search do?

index=condlog type=mysterymeat action=eaten I scats count as cornlog_count by us:

ACreates a table of the total count of users and split by corndogs.

BCreates a table of the total count of mysterymeat corndogs split by user.

CCreates a table with the count of all types of corndogs eaten split by user.

DCreates a table that groups the total number of users by vegetarian corndogs.

Show Answer

Question: 5

When using timechart, how many fields can be listed after a by clause? ( Choose Two )

Abecause timechart doesn't support using a by clause.

Bbecause _time is already implied as the x-axis.

Cbecause one field would represent the x-axis and the other would represent the y-axis.

DThere is no limit specific to timechart.

Show Answer

Splunk SPLK-1002 Quiz:4 Topic:7 Questions:16-20