Download Splunk.SPLK-1001.ActualTests.2020-10-26.199q.tqb
| Vendor: | Splunk |
| Exam Code: | SPLK-1001 |
| Exam Name: | Splunk Core Certified User |
| Date: | Oct 26, 2020 |
| File Size: | 547 KB |
Demo Questions
Question 1
Which search string only returns events from hostWWW3?
- host=WWW3
- host=WWW*
- Host=WWW3
Correct answer: B
Question 2
By default, how long does Splunk retain a search job?
- 10 Minutes
- 15 Minutes
- 1 Day
- 7 Days
Correct answer: A
Question 3
What must be done before an automatic lookup can be created? (Choose all that apply.)
- The lookup command must be used.
- The lookup definition must be created.
- The lookup file must be uploaded to Splunk.
- The lookup file must be verified using the inputlookup command.
Correct answer: B
