Question No 1

Suppose the following query in a Simple XML dashboard returns a table including hyperlinks: <search> <query>index news sourcetype web_proxy | table sourcetype title link </query> </search> Which of the following is a valid dynamic drilldown element to allow a user of the dashboard to visit the hyperlinks contained in the link field?

Choose the Choices:

<option name “link.openSearch.viewTarget">$row.link$</option>

<drilldown> <link target=“ blank">$$row.link$$</link> </drilldown>

<drilldown> <link target="_blank">$row.link|n$</link> </drilldown>

<drilldown> <link target “_blank">http://localhost:8000/debug /refresh</link> </drilldown>

Question No 2

When updating a knowledge object via REST, which of the following are valid values for the sharing Access Control List property?

Choose the Choices:

Question No 3

Which of the following are ways to get a list of search jobs? (Select all that apply.)

Choose the Choices:

Access Activity > Jobs with Splunk Web.

Use Splunk REST to query the /services/search/jobs endpoint.

Use Splunk REST to query the /services/saved/searches endpoint.

Use Splunk REST to query the /services/search/sid/results endpoint.

Question No 4

Which of the following are benefits from using Simple XML Extensions? (Select all that apply.)

Choose the Choices:

Question No 5

How can indexer acknowledgement be enabled for HTTP Event Collector (HEC)? (Select all that apply.)

Choose the Choices:

No need to do anything, it is turned on by default.

When a REST request is sent to create a token, the property for indexer acknowledgement must be set to 1.

When a new HEC token is created in Splunk Web, select the checkbox labeled “Enable indexer acknowledgement”.

When the Global Settings for HEC are updated in Splunk Web, select the checkbox labeled “Enable indexer acknowledgement”. Answer: CD Reference: https://docs.splunk.com/Documentation/Splunk/8.1.2/Data/UsetheHTTPEventCollector

Practice Splunk SPLK-2001 Exam Questions

Question No 1

Question No 2

Question No 3

Question No 4

Question No 5

SPLK-2001 Exam Features

SPLK-2001 PDF Dumps