Valentine Day Sale - Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: mxmas70

Home > Splunk > Splunk Certified Developer > SPLK-2001

SPLK-2001 Splunk Certified Developer Question and Answers

Question # 4

Which of the following formats are valid for a Splunk REST URI?

A.

host:port/endpoint

B.

scheme://host/servicesNS/*/

C.

$SPLUNK HOME/services/endpoint

D.

scheme://host:port/services/endpoint

Full Access
Question # 5

Assuming permissions are set appropriately, which REST endpoint path can be used by someone with a power user role to access information about mySearch, a saved search owned by someone with a user role?

A.

/servicesNS/-/data/saved/searches/mySearch

B.

/servicesNS/object/saved/searches/mySearch

C.

/servicesNS/search/saved/searches/mySearch

D.

/servicesNS/-/search/saved/searches/mySearch

Full Access
Question # 6

Which of the following are types of event handlers? (Select all that apply.)

A.

Search

B.

Set token

C.

Form input

D.

Visualization

Full Access
Question # 7

Searching “index=_internal metrics | head 3” from Splunk Web returned the following events:

04-12-2018 18:39:43.514 +0200 INFO Metrics – group=thruput, name=thruput, instantaneous_kbps=0.9651774014563425, instantaneous_eps=5.645638802094809, average_kbps=1.198995639527069, total_k_processed=2676, kb=29.91796875, ev=175, load_average=3.85888671875

04-12-2018 18:39:43.514 +0200 INFO Metrics – group_thruput, name_syslog_output, instantaneous_kbps=0, instantaneous_eps_0, average_kbps=0, total_k_processed=0, kb=0, ev=0

04-12-2018 18:39:43.513 +0200 INFO Metrics – group_thruput, name_index_thruput, instantaneous_kbps=0.9651773703189551, instantaneous_eps=4.87137960922438, average_kbps=1.1985932324065556, total_k_processed=2675, kb=29.91796875, ev=151

When the same search is required from a REST API call, which fields will be given? (Select all that apply.)

A.

_raw

B.

name

C.

sourcetype

D.

instantaneous_kbps

Full Access
Question # 8

After updating a dashboard in myApp, a Splunk admin moves myApp to a different Splunk instance. After logging in to the new instance, the dashboard is not seen. What could have happened? (Select all that apply.)

A.

The dashboard’s permissions were set to private.

B.

User role permissions are different on the new instance.

C.

The admin deleted the myApp/local directory before packaging.

D.

Changes were placed in $SPLUNK_HOME/etc./apps/search/default/data/ui/nav

Full Access
Question # 9

How can hiding or showing a panel by clicking on a chart or a table on the same form be performed?

A.

By using vent drilldown.

B.

By using workflow action.

C.

By using contextual drilldown.

D.

By using visualization drilldown.

Full Access
Question # 10

Which of the following will unset a token named my_token?

A.

$my_token$

B.

C.

false

D.

disabled

Full Access
Question # 11

Which of these URLs could be used to construct a REST request to search the employee KV store collection to find records with a rating greater than or equal to 2 and less than 5?

A.

‘http://localhost:8089/servicesNS/nobody/search/storage/collections/data/ employees?query={$and:[{rating:{$gte:2}},{rating:{$lt:5}}]} &output_mode-json’

B.

‘http://localhost:8089/servicesNS/nobody/search/storage/collections/data/ employees?query={$and:[{rating:$gte:2}},{rating:{$lt:5}}]} &output_mode=json’

C.

‘http://localhost:8089/servicesNS/nobody/search/storage/collections/data/ employees?query={%22rating%22:{%22$gte%22:2}},{%22$and%22},{%22rating%22:{% 22$lt%22:5}}} &output_mode=json’

D.

‘http://localhost:8089/servicesNS/nobody/search/storage/collections/data/ employees?query={%22$and%22:[{%22rating%22:{%22$gte%22:2}},{%22rating%22:{% 22$lt%22:5}}]} &output_mode=json’

Full Access
Question # 12

Which of the following statements defines a namespace?

A.

The namespace is a combination of the user and the app.

B.

The namespace is a combination of the user, the app, and the role.

C.

The namespace is a combination of the user, the app, the role, and the sharing level.

D.

The namespace is a combination of the user, the app, the role, the sharing level, and the permissions.

Full Access
Question # 13

Which of the following log files contains logs that are most relevant to Splunk Web?

A.

audit.log

B.

metrics.log

C.

splunkd.log

D.

web_service.log

Full Access
Question # 14

Which files within an app contain permissions information? (Select all that apply.)

A.

local/metadata.conf

B.

metadata/local.meta

C.

default/metadata.conf

D.

metadata/default.meta

Full Access
Question # 15

Data can be added to a KV store collection in which of the following format(s)?

A.

JSON

B.

JSON, XML

C.

JSON, XML, CSV

D.

JSON, XML, CSV, TXT

Full Access
Question # 16

When using the Splunk Web Framework to create a global search, which is the correct post-process syntax for the base search shown below?

var searchmain = new SearchManager{{ id: “base-search”,

search: “index= internal | head 10 | fields “*”, preview: true,

cache: true

}};

A.

var mypostproc1 = new PostProcessManager {{ id: “post1”,

managerid: “base-search”,

search: “| stats count by sourcetype”

}};

B.

var mypostproc1 = new PostProcessManager{{ id: “post1”,

managerid: “base”,

search: “| stats count by sourcetype”

}};

C.

var mypostproc1 = new PostProcess{{ id: “post1”,

managerid: “base-search”,

search: “| search stats count by sourcetype”

}};

D.

You cannot create global searches in the Splunk Web Framework.

Full Access
Question # 17

Which of the following are benefits from using Simple XML Extensions? (Select all that apply.)

A.

Add custom layouts.

B.

Add custom graphics.

C.

Add custom behaviors.

D.

Limit Splunk license consumption based on host.

Full Access
Question # 18

Which of the following is an example of a valid syntax for specifying an absolute time range modifier in a search?

A.

earliest=01/01/2019:00:00:00

B.

earliest=01/01/2019T00:00:00

C.

earliest=2019-01-01 00:00:00

D.

earliest=2019-01-01T00:00:00

Full Access
Question # 19

Which of the following is a way to monitor app performance? (Select all that apply.)

A.

Using Splunk logs.

B.

Using the search job inspector.

C.

Using the Monitoring Console.

D.

Using the storage/collections/config REST endpoint.

Full Access
Question # 20

When added to an app’s default.meta file, which of the following makes one of its views available to other apps?

A.

export = app

B.

export = none

C.

export = view

D.

export = system

Full Access
Question # 21

A user wants to add the token $token_name$ to a dashboard for use in a drilldown. Which token filter encodes URL values?

A.

$$token_name$$

B.

$token_name|h$

C.

$token_name|n$

D.

$token_name|u$

Full Access