SPLK-1001 Exam Dumps - Splunk Core Certified User Questions and Answers

stdev

dev

count deviation

by standarddev

dc(field)

count(field)

count-by(field)

distinct-count(field)

Real-time searches happen instantly, while relative searches happen at a scheduled time.

Real-time searches display results from a rolling time window, while relative searches display results from a set length of time.

Real-time searches run constantly in the background, while relative searches only run when certain criteria are met.

Real-time represents events that have happened in a set time window, while relative will display results from a rolling time window.

Only HF

No

Yes

Once a search job begins, it cannot be stopped

A search job can only be paused when less than 50% of events are returned

A search job can only be stopped when less than 50% of events are returned

Once a search job begins, it can be stopped or paused at any point in time

f*il

*fail

fail*

*fail*

True

False

Date & Time Range

Advanced

Date Range

Presets

Relative

Open new search.

Exclude the item from search.

None of the above.

Add the item to search

Can be accessed by Apps > Search & Reporting.

Provides default interface for searching and analyzing logs.

Enables the user to create knowledge object, reports, alerts and dashboards.

It only gives us search functionality.