무료 온라인 액세스 Splunk.SPLK-1002.v2026-09-13.q139 모의 시험 (Page 10)

SPLK-1002 문제 41

Use this command to use lookup fields in a search and see the lookup fields in the field sidebar.

A. lookup

B. inputlookup

SPLK-1002 문제 42

A field alias is created where field1-fieid2 and the Overwrite Field Values checkbox is selected.
What happens if an event only contains values for fieid1?

A. field2 values are removed from the events.

B. field1 and field2 values are merged.

C. field2 values are unchanged.

D. field2 values are replaced with the value of the field1.

SPLK-1002 문제 43

Which of the following transforming commands can be used with transactions?

A. chart, timechart, stats, eventstats

B. chart, timechart, stats, diff

C. chart, timeehart, datamodel, pivot

D. chart, timecha:t, stats, pivot

정답: A

Explanation
The correct answer is A. chart, timechart, stats, eventstats.
Transforming commands are commands that change the format of the search results into a table or a chart.
They can be used to perform statistical calculations, create visualizations, or manipulate data in various ways1.
Transactions are groups of events that share some common values and are related in some way. Transactions can be defined by using the transaction command or by creating a transaction type in the transactiontypes.conf file2.
Some transforming commands can be used with transactions to create tables or charts based on the transaction fields. These commands include:
chart: This command creates a table or a chart that shows the relationship between two or more fields. It can be used to aggregate values, count occurrences, or calculate statistics3.
timechart: This command creates a table or a chart that shows how a field changes over time. It can be used to plot trends, patterns, or outliers4.
stats: This command calculates summary statistics on the fields in the search results, such as count, sum, average, etc. It can be used to group and aggregate data by one or more fields5.
eventstats: This command calculates summary statistics on the fields in the search results, similar to stats, but it also adds the results to each event as new fields. It can be used to compare events with the overall statistics.
These commands can be applied to transactions by using the transaction fields as arguments. For example, if you have a transaction type named "login" that groups events based on the user field and has fields such as duration and eventcount, you can use the following commands with transactions:
| chart count by user : This command creates a table or a chart that shows how many transactions each user has.
| timechart span=1h avg(duration) by user : This command creates a table or a chart that shows the average duration of transactions for each user per hour.
| stats sum(eventcount) as total_events by user : This command creates a table that shows the total number of events for each user across all transactions.
| eventstats avg(duration) as avg_duration : This command adds a new field named avg_duration to each transaction that shows the average duration of all transactions.
The other options are not valid because they include commands that are not transforming commands or cannot be used with transactions. These commands are:
diff: This command compares two search results and shows the differences between them. It is not a transforming command and it does not work with transactions.
datamodel: This command retrieves data from a data model, which is a way to organize and categorize data in Splunk. It is not a transforming command and it does not work with transactions.
pivot: This command creates a pivot report, which is a way to analyze data from a data model using a graphical interface. It is not a transforming command and it does not work with transactions.
References:
About transforming commands
About transactions
chart command overview
timechart command overview
stats command overview
[eventstats command overview]
[diff command overview]
[datamodel command overview]
[pivot command overview]

SPLK-1002 문제 44

A POST workflow action will pass which types of arguments to an external website?

A. Clear text only.

B. A mix of clear text strings and variables.

C. It can only send raw event data.

D. Variables only.

SPLK-1002 문제 45

When a search returns __________, you can view the results as a list.

A. transactions

B. a list of events

C. statistical values

다른 버전: 532Splunk.SPLK-1002.v2026-10-15.q187; 2544Splunk.SPLK-1002.v2026-02-20.q238; 2131Splunk.SPLK-1002.v2025-09-22.q257; 1992Splunk.SPLK-1002.v2024-10-05.q191; 2350Splunk.SPLK-1002.v2024-03-19.q178; 2148Splunk.SPLK-1002.v2023-05-27.q122; 2627Splunk.SPLK-1002.v2023-01-12.q132; 3352Splunk.SPLK-1002.v2022-06-09.q161; 3512Splunk.SPLK-1002.v2022-04-26.q156

최근 업로드: 231Google.Associate-Cloud-Engineer.v2026-10-29.q445; 163Cisco.300-415.v2026-10-29.q187; 173CheckPoint.156-561.v2026-10-28.q97; 210GAQM.Databricks-Certified-Data-Engineer-Associate.v2026-10-28.q244; 231SolarWinds.Hybrid-Cloud-Observability-Network-Monitoring.v2026-10-28.q140; 172Workday.Workday-Pro-Integrations.v2026-10-28.q85; 147ProtocolAnalysis.WCNA.v2026-10-28.q35; 191Oracle.1Z0-902.v2026-10-27.q91; 210Huawei.H12-323_V2.0.v2026-10-26.q108; 162SAP.C-P2W10-2504.v2026-10-26.q30