Download Splunk.SPLK-1001.TestKing.2019-06-03.23q.tqb
| Vendor: | Splunk |
| Exam Code: | SPLK-1001 |
| Exam Name: | Splunk Core Certified User |
| Date: | Jun 03, 2019 |
| File Size: | 72 KB |
Demo Questions
Question 1
Which search string only returns events from hostWWW3?
- host=*
- host=WWW3
- host=WWW*
- Host=WWW3
Correct answer: B
Question 2
By default, how long does Splunk retain a search job?
- 10 Minutes
- 15 Minutes
- 1 Day
- 7 Days
Correct answer: A
Explanation:
Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Extendjoblifetimes Reference: https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Extendjoblifetimes
Question 3
Which of the following Splunk components typically resides on the machines where data originates?
- Indexer
- Forwarder
- Search head
- Deployment server
Correct answer: C
