SPLK-1003 Free Practice Test

Which valid bucket types are searchable? (Select all that apply.)

1. A. Hot buckets
2. B. Cold buckets
3. C. Warm buckets
4. D. Frozen buckets

Correct Answer: ABC
Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Indexer/HowSplunkstoresindexes

How does the Monitoring Console monitor forwarders?

1. A. By pulling internal logs from forwarders.
2. B. By using the forwarder monitoring add-on.
3. C. With internal logs forwarded by forwarders.
4. D. With internal logs forwarder by deployment server.

Correct Answer: A

Which of the following are methods for adding inputs in Splunk? (Select all that apply.)

1. A. CLI
2. B. Splunk Web
3. C. Editing inpits.conf
4. D. Editing monitor.conf

Correct Answer: AB
Reference: http://dev.splunk.com/view/dev -guide/SP-CAAAE3A

Which of the following is a valid distributed search group?

1. A. [distributedSearch:Paris] default = false servers = server1, server2
2. B. [searchGroup:Paris] default = false servers = server1:8089, server2:8089
3. C. [searchGroup:Paris] default = false servers = server1:9997, server2:9997
4. D. [distributedSearch:Paris] default = false servers = server1:8089; server2:8089

Correct Answer: D
Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/DistSearch/Distributedsearchgroups

What are the required stanza attributes when configuring the transforms.conf to manipulate or remove events?

1. A. REGEX, DEST, FORMAT
2. B. REGEX, SRC_KEY, FORMAT
3. C. REGEX, DEST_KEY, FORMAT
4. D. REGEX, DEST_KEY, FORMATTING

Correct Answer: C
Reference: https://docs.splunk.com/Documentation/Splunk/7.3.1/Admin/Transformsconf