SPLK-1002 Free Sample Questions

3Which workflow uses field values to perform a secondary search?

What is the correct syntax to search for a tag associated with a value on a specific field?

What is the correct syntax to search for a tag associated with a value on a specific field?

What are the two parts of a root event dataset?

When using| timechart by host, which field is represented in the x-axis?

Given the macro definition below, what should be entered into the Name and Arguments fields to correctly configure the macro?

A field alias has been created based on an original field. A search without any transforming commands is then executed in Smart Mode. Which field name appears in the results?

Which of the following statements would help a user choose between the transaction and stats commands?

What do events in a transaction have in common?

Which of the following statements about event types is true? (Choose all that apply.)