Guide (New 2021) Actual Splunk SPLK-2001 Exam Questions
SPLK-2001 Exam Dumps Pass with Updated 2021 Certified Exam Questions
NEW QUESTION 23
Which of the following describes a Splunk custom visualization?
- A. A visualization that uses the Splunk Custom Visualization API.
- B. A visualization with custom colors.
- C. A visualization in Splunk modified by the user.
- D. Any visualization available in Splunk.
Answer: A
NEW QUESTION 24
A user wants to add the token $token_name$ to a dashboard for use in a drilldown. Which token filter encodes URL values?
- A. $$token_name$$
- B. $token_name|n$
- C. $token_name|u$
- D. $token_name|h$
Answer: C
NEW QUESTION 25
How can event logs be collected from a remote Windows machine using a standard Splunk installation and no customization? (Select all that apply.)
- A. By using HTTP event collector.
- B. By using a Windows heavy forwarder.
- C. By using a Windows universal forwarder.
- D. By configuring a WMI input.
Answer: C,D
NEW QUESTION 26
Which of the following will unset a token named my_token?
- A. <unset>$my_token$</unset>
- B. <set token="my_token">false</token>
- C. <set token="my_token">disabled</set>
- D. <unset token="my_token"></unset>
Answer: D
NEW QUESTION 27
Which statements are true regarding HEC (HTTP Event Collector) tokens? (Select all that apply.)
- A. Tokens can be edited using the data/inputs/http/{tokenName} endpoint.
- B. The edit token http admin role capability is required to create a token.
- C. To create a token, send a POST request to services/collector endpoint.
- D. Multiple tokens can be created for use with different sourcetypes and indexes.
Answer: C,D
NEW QUESTION 28
Using Splunk Web to modify config settings for a shared object, a revised config file with those changes is placed in which directory?
- A. $SPLUNK_HOME/etc/apps/myApp/default
- B. $SPLUNK_HOME/etc/apps/myApp/local
- C. $SPLUNK_HOME/etc/system/default/
- D. $SPLUNK_HOME/etc/system/local
Answer: B
NEW QUESTION 29
What must be done when calling the serviceNS endpoint?
- A. Authenticate with an admin user.
- B. Authenticate with the user of the required context.
- C. Pass the user and app context in the request payload.
- D. Specify the user and app context in the URI.
Answer: D
NEW QUESTION 30
Which of the following is an example of a Splunk KV store use case? (Select all that apply.)
- A. Stores application state as a user interacts with an app.
- B. Stores checkpoint data for modular inputs.
- C. Tracks workflow in an incident-review system.
- D. Indexes metrics data from remote HTTP sources.
Answer: B,C
NEW QUESTION 31
Which of the following are characteristics of an add-on? (Select all that apply.)
- A. Contains technology or components not intended for reuse by other apps.
- B. Can depend on add-ons for correct operation.
- C. Requires navigation file.
- D. Occupies a unique namespace within Splunk.
Answer: A,C
NEW QUESTION 32
A fellow Splunk administrator is reviewing an app that has been downloaded from splunkbase and deployed in an organization. The admin has e-mailed the following configuration snippet with a brief note that says "fix the permissions".
In what configuration file should the snippet be placed?
[]
access = read : [ * ], write : [ admin ] export - system
(Assume that $APP_HOME refers to the path that the app is installed, e.g. $SPLUNK_HOME/etc/apps/<app name>)
- A. $APP_HOME/metadata/local.meta
- B. $APP_HOME/default/app.conf
- C. $SPLUNK_HOME/etc/system/local/server.conf
- D. $APP_HOME/local/default.meta
Answer: C
NEW QUESTION 33
Which of the following are benefits from using Simple XML Extensions? (Select all that apply.)
- A. Add custom graphics.
- B. Add custom behaviors.
- C. Add custom layouts.
- D. Limit Splunk license consumption based on host.
Answer: B,C
NEW QUESTION 34
Which of the following Simple XML elements configure panel link buttons? (Select all that apply.)
- A. <option name="link.visible">true</option>
- B. <option name="trellis.enabled">false</option>
- C. <title>Open In Search</title>
- D. <option name="refresh.link.visible">false</option>
Answer: A,C
NEW QUESTION 35
Searching "index=_internal metrics | head 3" from Splunk Web returned the following events:
04-12-2018 18:39:43.514 +0200 INFO Metrics - group=thruput, name=thruput, instantaneous_kbps=0.9651774014563425, instantaneous_eps=5.645638802094809, average_kbps=1.198995639527069, total_k_processed=2676, kb=29.91796875, ev=175, load_average=3.85888671875
04-12-2018 18:39:43.514 +0200 INFO Metrics - group_thruput, name_syslog_output, instantaneous_kbps=0, instantaneous_eps_0, average_kbps=0, total_k_processed=0, kb=0, ev=0
04-12-2018 18:39:43.513 +0200 INFO Metrics - group_thruput, name_index_thruput, instantaneous_kbps=0.9651773703189551, instantaneous_eps=4.87137960922438, average_kbps=1.1985932324065556, total_k_processed=2675, kb=29.91796875, ev=151 When the same search is required from a REST API call, which fields will be given? (Select all that apply.)
- A. name
- B. sourcetype
- C. _raw
- D. instantaneous_kbps
Answer: B,C
NEW QUESTION 36
When using the Splunk Web Framework to create a global search, which is the correct post-process syntax for the base search shown below?
var searchmain = new SearchManager{{ id: "base-search",
search: "index= internal | head 10 | fields "*", preview: true,
cache: true
}};
- A. var mypostproc1 = new PostProcessManager {{ id: "post1",
managerid: "base-search",
search: "| stats count by sourcetype"
}}; - B. You cannot create global searches in the Splunk Web Framework.
- C. var mypostproc1 = new PostProcess{{ id: "post1",
managerid: "base-search",
search: "| search stats count by sourcetype"
}}; - D. var mypostproc1 = new PostProcessManager{{ id: "post1",
managerid: "base",
search: "| stats count by sourcetype"
}};
Answer: A
NEW QUESTION 37
Suppose the following query in a Simple XML dashboard returns a table including hyperlinks:
<search>
<query>index news sourcetype web_proxy | table sourcetype title link
</query>
</search>
Which of the following is a valid dynamic drilldown element to allow a user of the dashboard to visit the hyperlinks contained in the link field?
- A. <drilldown>
<link target="_blank">$row.link|n$</link>
</drilldown> - B. <option name "link.openSearch.viewTarget">$row.link$</option>
- C. <drilldown>
<link target "_blank">http://localhost:8000/debug/refresh</link>
</drilldown> - D. <drilldown>
<link target=" blank">$$row.link$$</link>
</drilldown>
Answer: B
NEW QUESTION 38
Which of the following are ways to get a list of search jobs? (Select all that apply.)
- A. Use Splunk REST to query the /services/search/jobs endpoint.
- B. Use Splunk REST to query the /services/saved/searches endpoint.
- C. Access Activity > Jobs with Splunk Web.
- D. Use Splunk REST to query the /services/search/sid/results endpoint.
Answer: A,C
NEW QUESTION 39
......
Pass Guaranteed Quiz 2021 Realistic Verified Free Splunk: https://braindumps.free4torrent.com/SPLK-2001-valid-dumps-torrent.html