Free SPLK-2001 Exam Dumps

Question 6

Which items below are configured in inputs.conf? (Select all that apply.)

A. A modular input written in Python.
B. A file input monitoring a JSON file.
C. A custom search command written in Python.
D. An HTTP Event Collector as receiver of data from an app.

Correct Answer:AD

Question 7

When output_mode is not used, which element of a feed is a human readable name for a returned entry?

A. Author
B. Title
C. Link
D. Id

Correct Answer:B

Question 8

Which of the following are valid parent elements for the event action shown below? (Select all that apply.)
sourcetype=$click.value|s$>

A. <eval>
B.
C.
D.

Correct Answer:AC

Question 9

Assuming permissions are set appropriately, which REST endpoint path can be used by someone with a power user role to access information about mySearch, a saved search owned by someone with a user role?

A. /servicesNS/-/data/saved/searches/mySearch
B. /servicesNS/object/saved/searches/mySearch
C. /servicesNS/search/saved/searches/mySearch
D. /servicesNS/-/search/saved/searches/mySearch

Correct Answer:D

Question 10

How can indexer acknowledgement be enabled for HTTP Event Collector (HEC)? (Select all that apply.)

A. No need to do anything, it is turned on by default.
B. When a REST request is sent to create a token, the property for indexer acknowledgement must be set to 1.
C. When a new HEC token is created in Splunk Web, select the checkbox labeled ??Enable indexer acknowledgement??.
D. When the Global Settings for HEC are updated in Splunk Web, select the checkbox labeled ??Enable indexer acknowledgement??.

Correct Answer:CD