Reference Solution for

SPLK-1002
SPLK-1001

SPLK-1002

Score: 800/1000
Version: 1
Time Limit: 120 Minutes

1
Licensed to Trial User
Exam A (5 questions)
Question 1
Parsing of data can happen both in HF and UF.

 Yes
 No

Question 2
We should use heavy forwarder for sending event-based data to Indexers.

 False
 True

Question 3
Which component of Splunk is primarily responsible for saving data?

 Search Head
 Heavy Forwarder
 Indexer
 Universal Forwarder

Question 4
Splunk Parses data into individual events, extracts time, and assigns metadata.

 False
 True

Question 5
What is the main requirement for creating visualizations using the Splunk UI?

 Your search must transform event data into Excel file format first.
 Your search must transform event data into XML formatted data first.
 Your search must transform event data into statistical data tables first.
 Your search must transform event data into JSON formatted data first.

2 Licensed to Trial User