SPLK-1002 Free Practice Test

- (Exam Topic 1)
Which of the following statements describes this search? sourcetype=access_combined I transaction JSESSIONID | timechart avg (duration)

1. A. This is a valid search and will display a timechart of the average duration, of each transaction event.
2. B. This is a valid search and will display a stats table showing the maximum pause among transactions.
3. C. No results will be returned because the transaction command must include the startswith and endswith options.
4. D. No results will be returned because the transaction command must be the last command used in the search pipeline.

Correct Answer: A

- (Exam Topic 1)
Which of the following file formats can be extracted using a delimiter field extraction?

1. A. CSV
2. B. PDF
3. C. XML
4. D. JSON

Correct Answer: A