Splunk SPLK-1004 Exam Questions

Question 6 of 95

What type of drilldown passes a value from a user click into another dashboard or external page?

A.

Visualization

B.

Event

C.

Dynamic

D.

Contextual

Suggested Answer: C

The correct answer is Dynamic. A Dynamic drilldown passes a value from a user click into another dashboard or external page. It allows specifying a path to a URL, which can be a relative path to a dashboard in another app or an absolute path to an external website, thereby transferring the clicked values as tokens.

Community votes

No votes yet

Question 7 of 95

What file types does Splunk use to define geospatial lookups?

A.

GPX or GML files

B.

TXT files

C.

KMZ or KML files

D.

CSV files

Suggested Answer: C

Community votes

No votes yet

Question 8 of 95

How can form inputs impact dashboard panels using inline searches?

A.

A token in a search can be replaced by a form input value.

B.

Panels powered by an inline search require a minimum of one form input.

C.

Form inputs can not impact panels using inline searches.

D.

Adding a form input to a dashboard converts all panels to prebuilt panels.

Suggested Answer: A

Community votes

No votes yet

Question 9 of 95

How can a lookup be referenced in an alert?

A.

Use the lookup dropdown in the alert configuration window.

B.

Follow a lookup with an alert command in the search bar.

C.

Run a search that uses a lookup and save as an alert.

D.

Upload a lookup file directly to the alert.

Suggested Answer: C

To reference a lookup in an alert, you run a search that uses a lookup and then save that search as an alert. This involves using the lookup command within the search query to use the lookup's data and then configuring that search to trigger alerts based on the criteria within the search results.

Community votes

No votes yet

Question 10 of 95

What is an example of the simple XML syntax for a base search and its post-process search?

A.

<search id="myBaseSearch">, <search base="myBaseSearch">

B.

<search globalsearch="myBaseSearch">, <search globalsearch>

C.

<panel id="myBaseSearch">, <panel base="myBaseSearch">

D.

<search id="myGlobalSearch">, <search base="myBaseSearch">

Suggested Answer: A

A correct simple XML syntax for a base search and its post-process search would be using the

tag with an id for the base search, and another tag with a base attribute referring to the id of the base search. Therefore, for the base search and for the post-process search is the correct usage.

Community votes

No votes yet