Free Splunk SPLK-1001 Practice Exam with Questions & Answers

time

_time

EventTime

timestamp

Will display result depending on the data.

Will return event where status field exist but value of that field is not 100.

Will return event where status field exist but value of that field is not 100 and all events where status field

doesn't exist.

index=security Error Fail

index=security error OR fail

index=security “error failure”

index=security NOT error NOT fail

No

Yes

False

True

(index=netfw failure) AND index=netops warn OR critical

(index=netfw failure) OR (index=netops (warn OR critical))

(index=netfw failure) AND (index=netops (warn OR critical))

(index=netfw failure) OR index=netops OR (warn OR critical)

the_questionnaire _pedia

the_questionnaire pedia

the_questionnaire_pedia

the_questionnaire Pedia

Include all formatting commands before any search terms

Include at least one function as this is a search requirement

Include the search terms at the beginning of the search string

Avoid using formatting clauses as they add too much overhead

B. host=WWW3

C. host=WWW*

D. Host=WWW3

True

False