SPLK-2001 Exam Question 6
Which of the following is an example of a valid syntax for specifying an absolute time range modifier in a search?
SPLK-2001 Exam Question 7
Which of the following are characteristics of an add-on? (Select all that apply.)
SPLK-2001 Exam Question 8
A fellow Splunk administrator is reviewing an app that has been downloaded from splunkbase and deployed in an organization. The admin has e-mailed the following configuration snippet with a brief note that says "fix the permissions".
In what configuration file should the snippet be placed?
[]
access = read : [ * ], write : [ admin ] export - system
(Assume that $APP_HOME refers to the path that the app is installed, e.g. $SPLUNK_HOME/etc/apps/<app name>)
In what configuration file should the snippet be placed?
[]
access = read : [ * ], write : [ admin ] export - system
(Assume that $APP_HOME refers to the path that the app is installed, e.g. $SPLUNK_HOME/etc/apps/<app name>)
SPLK-2001 Exam Question 9
Which of the following log files contains logs that are most relevant to Splunk Web?
SPLK-2001 Exam Question 10
There is a global search named "global_search" defined on a form as shown below:
<search id="global_search">
<query>
index-_internal source-*splunkd.log | stats count by component, log_level
</query>
</search>
Which of the following would be a valid post-processing search? (Select all that apply.)
<search id="global_search">
<query>
index-_internal source-*splunkd.log | stats count by component, log_level
</query>
</search>
Which of the following would be a valid post-processing search? (Select all that apply.)
