Skip to main content
ITPrepCerts
Login
Exams Free Samples About Contact
Login Create an account

SPLK-1001 Splunk Core Certified User

  • Splunk
  • 5 free sample questions

About this exam

SPLK-1001 is the Splunk exam Splunk Core Certified User. Paid practice material for this exam is not available yet, but you can try its free sample questions.

Exam code
SPLK-1001
Vendor
Splunk
Practice questions
Not available yet
Free sample questions
5
Question bank last updated
Not available yet

Try 2 sample questions

Taken from the free sample set for SPLK-1001.

Question 1

Splunk extracts fields from event data at index time and at search time.

  1. Option A:
    True
  2. Option B:
    False
Show answer and explanation

Correct answer: A

[Reference: https://docs.splunk.com/Documentation/Splunk/7.2.3/SearchTutorial/Usefieldstosearch, , ]

Question 2

Which search will return the 15 least common field values for the dest_ip field?

  1. Option A:

    sourcetype=firewall | rare num=15 dest_ip

  2. Option B:

    sourcetype=firewall | rare last=15 dest_ip

  3. Option C:

    sourcetype=firewall | rare count=15 dest_ip

  4. Option D:

    sourcetype=firewall | rare limit=15 dest_ip

Show answer and explanation

Correct answer: C

[Reference: https://answers.splunk.com/answers/41928/add-a-lookup-csv-colum-information-to-the-results-ofa-inputlookup-search.html, ]

See all 5 free sample questions