Free Splunk Certified Developer Exam SPLK-2001 Exam Practice Test

Using Splunk Web to modify config settings for a shared object, a revised config file with those changes is placed in which directory?

• $SPLUNK_HOME/etc/apps/myApp/local
• $SPLUNK_HOME/etc/system/default/
• $SPLUNK_HOME/etc/system/local
• $SPLUNK_HOME/etc/apps/myApp/default

A dashboard is taking too long to load. Several searches start with the same SPL. How can the searches be optimized in this dashboard? (Select all that apply.)

• Convert searches to include NOT expressions.
• Restrict the time range of the search as much as possible.
• Replace | stats command with | transaction command wherever possible.
• Convert the common SPL into a Global Search and convert the other searches to post-processing searches.

Which of the following are benefits from using Simple XML Extensions? (Select all that apply.)

• Add custom layouts.
• Add custom graphics.
• Add custom behaviors.
• Limit Splunk license consumption based on host.

Which of the following statements define a namespace?

• The namespace is a combination of the user and the app.
• The namespace is a combination of the user, the app, and the role.
• The namespace is a combination of the user, the app, the role, and the sharing level.
• The namespace is a combination of the user, the app, the role, the sharing level, and the permissions.

Which of the following formats are valid for a Splunk REST URI?

• host:port/endpoint
• scheme://host/servicesNS/*/
• $SPLUNK HOME/services/endpoint
• scheme://host:port/services/endpoint

Given a dashboard with a Simple XML extension in myApp, what is the XML reference for the file myJS.js located in myOtherApp in the location shown below?$SPLUNK_HOME/etc/apps/myOtherApp/appserver/static/javascript/

• <dashboard script=''myJs.js''>
• <dashboard script=''myOtherApp/myJS.js''>
• <dashboard script=''myOtherApp:javascript/myJS.js''>
• <dashboard script=''myOtherApp:appserver/static/javascript/myJS.js''>

Which of the following search commands can be used to perform statistical queries on indexed fields in TSIDX files?

• stats
• tstats
• tscollect
• transaction

Which of the following are ways to get a list of search jobs? (Select all that apply.)

• Access Activity > Jobs with Splunk Web.
• Use Splunk REST to query the /services/search/jobs endpoint.
• Use Splunk REST to query the /services/saved/searches endpoint.
• Use Splunk REST to query the /services/search/sid/results endpoint.

Which of the following will unset a token named my_token?

• <unset>$my_token$</unset>
• <unset token=''my_token''></unset>
• <set token=''my_token''>false</token>
• <set token=''my_token''>disabled</set>

Which of the following are valid request arguments for the REST search endpoints? (Select all that apply.)

• latest_time=rt
• latest_time=now
• earliest_time=-5h@h
• earliest_time=rt_10m@m