SPLK-1002 무료 덤프문제 온라인 액세스

When using the Field Extractor (FX) to perform a field extraction, which delimiter can be used?

• A.A period or comma.
• B.Any consistent character.
• C.A tab or space.
• D.A comma.

The fields sidebar does not show________. (Select all that apply.)

• A.all extracted fields
• B.interesting fields
• C.selected fields

Which SPL query will group results that occur within 15 seconds of each other by user and host?

• A.index=firewall | transaction user host span=15s
• B.index=firewall | stats count by _time host user maxspan=15s
• C.index=firewall | stats count by _time host user span=15s
• D.index=firewall | transaction user host maxspan=15s

When creating a data model, which root dataset requires at least one constraint?

• A.Root event dataset
• B.Root transaction dataset
• C.Root search dataset
• D.Root child dataset

Which of the following statements describe GET workflow actions?

• A.Configuration of GET workflow actions includes choosing a sourcetype.
• B.GET workflow actions can be configured to open the URT link in the current window or in a new window
• C.Label names for GET workflow actions must include a field name surrounded by dollar signs.
• D.GET workflow actions must be configured with POST arguments.