Free Splunk Certified Developer Exam SPLK-2001 Exam Practice Test

Which event handler uses the <selection> element to support pan and zoom functionality?

• Visualization event handler
• Form input event handler
• Condition event handler
• Search event handler

Searching ''index=_internal metrics | head 3'' from Splunk Web returned the following events:04-12-2018 18:39:43.514 +0200 INFO Metrics -- group=thruput, name=thruput, instantaneous_kbps=0.9651774014563425, instantaneous_eps=5.645638802094809, average_kbps=1.198995639527069, total_k_processed=2676, kb=29.91796875, ev=175, load_average=3.8588867187504-12-2018 18:39:43.514 +0200 INFO Metrics -- group_thruput, name_syslog_output, instantaneous_kbps=0, instantaneous_eps_0, average_kbps=0, total_k_processed=0, kb=0, ev=004-12-2018 18:39:43.513 +0200 INFO Metrics -- group_thruput, name_index_thruput, instantaneous_kbps=0.9651773703189551, instantaneous_eps=4.87137960922438, average_kbps=1.1985932324065556, total_k_processed=2675, kb=29.91796875, ev=151When the same search is required from a REST API call, which fields will be given? (Select all that apply.)

• _raw
• name
• sourcetype
• instantaneous_kbps

When added to an app's default.meta file, which of the following makes one of its views available to other apps?

• export = app
• export = none
• export = view
• export = system

Suppose the following query in a Simple XML dashboard returns a table including hyperlinks:<search><query>index news sourcetype web_proxy | table sourcetype title link</query></search>Which of the following is a valid dynamic drilldown element to allow a user of the dashboard to visit the hyperlinks contained in the link field?

• <option name ''link.openSearch.viewTarget'>$row.link$</option>
• <drilldown> <link target='' blank'>$$row.link$$</link> </drilldown>
• <drilldown> <link target='_blank'>$row.link|n$</link> </drilldown>
• <drilldown> <link target ''_blank'>http://localhost:8000/debug/refresh</link> </drilldown>

Data can be added to a KV store collection in which of the following format(s)?

• JSON
• JSON, XML
• JSON, XML, CSV
• JSON, XML, CSV, TXT

Consider the following Python code snippet used in a Splunk add-on:if not os.path.exists(full_path): self.doAction(full_path, header) else: f = open (full_path) oldORnew = f.readline().split('','') f.close()An attacker could create a denial of service by causing an error in either the open() or readline()commands. What type of vulnerability is this?

• CWE-693: Protection Mechanism Failure
• CWE-562: Return of Stack Variable Address
• CWE-404: Improper Resource Shutdown or Release
• CWE-636: Not Failing Securely ('Failing Open')

A dashboard is taking too long to load. Several searches start with the same SPL. How can the searches be optimized in this dashboard? (Select all that apply.)

• Convert searches to include NOT expressions.
• Restrict the time range of the search as much as possible.
• Replace | stats command with | transaction command wherever possible.
• Convert the common SPL into a Global Search and convert the other searches to post-processing searches.

Which of the following is an intended use of HTTP Event Collector tokens?

• A cookie.
• An HTTP header field.
• A JSON field in the HTTP request.
• A password in conjunction with login.

Which of the following log files contains logs that are most relevant to Splunk Web?

• audit.log
• metrics.log
• splunkd.log
• web_service.log

Which of the following are types of event handlers? (Select all that apply.)

• Search
• Set token
• Form input
• Visualization