Exam Outline<\/h2>\n\n\n\n

The Splunk core certified user exam covers eight domains: <\/p>\n\n\n\n

• Splunk Basics – 5%<\/li>
• Basic Searching – 22% <\/li>
• Using Fields in Searches – 20% <\/li>
• Search Language Fundamentals – 15%<\/li>
• Using Basic Transforming Commands – 15%<\/li>
• Creating Reports and Dashboards – 12 %<\/li>
• Creating and Using Lookups – 6%<\/li>
• Creating Scheaduled Reports and alerts – 5%<\/li><\/ul>\n\n\n\n

  <\/p>\n\n\n\n

  Example questions<\/h2>\n\n\n\n

  1. What are the main components of Splunk?
     1. Splunk forwarder, indexer, search head<\/strong><\/li>
     2. Splunk indexer, heavy forwarder, search head<\/li>
     3. Splunk indexer, deployment manager, forwarder<\/li>
     4. Splunk heavy forwarder, deployment manager, splunk indexer<\/li><\/ol><\/li>
     5. When you install Splunk on a stand-alone machine, which components are on it?
        1. input data<\/li>
        2. parser<\/li>
        3. indexer<\/li>
        4. all of the above<\/strong><\/li><\/ol><\/li>
        5. When you install the Splunk Enterprise free 60-day trial version, what is you daily index size?
           1. 100 MB<\/li>
           2. 500 MB<\/strong><\/li>
           3. 750 MB<\/li>
           4. 1000 MB<\/li><\/ol><\/li>
           5. A ………….. displays statistical trends over time.
              1. chart value<\/li>
              2. time series<\/strong><\/li>
              3. stats value<\/li>
              4. table value<\/li><\/ol><\/li>
              5. The …………. command can display any series of data you want to plot.
                 1. chart <\/strong><\/li>
                 2. stat<\/li>
                 3. time chart <\/li>
                 4. both 1 and 2<\/li><\/ol><\/li>
                 5. Which are filtering commands in Splunk?
                    1. where, dedup, and head<\/li>
                    2. dedup, head, and tail<\/li>
                    3. where, dedup, and tail<\/li>
                    4. all of the above<\/strong><\/li><\/ol><\/li>
                    5. A transaction is a grouping command.
                       1. true<\/strong><\/li>
                       2. false<\/li><\/ol><\/li><\/ol>\n\n\n\n

                          <\/p>\n\n\n\n

                          More about exam<\/h2>\n\n\n\n

                          Notes:<\/p>\n\n\n\n

                          • Splunk basics<\/strong> – componets, usages, apps, add-ons, customizing user settings, basic navigation in Splunk.<\/li>
                          • Basic Searching<\/strong> – run basic search, time range, search results, refine searches, timeline, events, search job, save search results. <\/li>
                          • Using Fields in Searches <\/strong>– fields, fields in searches, sidebar.<\/li>
                          • Search Language Fundamentals <\/strong>– general search practices, basic search commands, search pipeline, indexes in search, table, rename, fields, dedup, sort. <\/li>
                          • Using basic transforming commands <\/strong>– top, rare, stats.<\/li>
                          • Creating Reports and Dashboards – <\/strong>save a search as a report, edit reports, create reports to display statistics, visualizations, charts, add a report to a dashboard, edit dashboard.<\/li>
                          • Creating and Using Lookups <\/strong>– lookups, lookup file, lookup definition, automatic lookup, lookup in searches.<\/li>
                          • Creating Scheaduled Reports and Alerts <\/strong>– scheduled report, configuration of scheduled reports, alerts.<\/li>
                          • <\/li><\/ul>\n\n\n\n

                            Sources<\/h2>\n\n\n\n

                            Sources (Examples of questions): <\/p>\n\n\n\n

                            • https:\/\/docs.splunk.com\/Documentation\/Splunk\/8.1.2\/SearchReference\/Stats<\/li>
                            • https:\/\/www.apress.com\/gp\/book\/9781484266687<\/li>
                            • https:\/\/docs.splunk.com\/Documentation\/Splunk\/latest\/SearchReference\/Transaction<\/li><\/ul>\n\n\n\n

                              Some sources for test preparations: <\/p>\n\n\n\n

                              • https:\/\/www.testpreptraining.com\/tutorial\/splunk-core-certified-user-splk-1001\/ <\/li>
                              • https:\/\/vceguide.com\/splunk\/<\/li>
                              • https:\/\/www.examtopics.com\/exams\/splunk\/splk-1001\/view\/<\/li>
                              • https:\/\/www.itexams.com\/info\/SPLK-1001<\/li>
                              • https:\/\/www.itexams.com\/exam\/SPLK-1001<\/li><\/ul>\n\n\n\n

                                Exam: – https:\/\/wsr.pearsonvue.com\/<\/p>\n\n\n\n

                                <\/p>\n","protected":false},"excerpt":{"rendered":"

                                Exam Outline The Splunk core certified user exam covers eight domains: Splunk Basics – 5% Basic Searching – 22% Using Fields in Searches – 20% Search Language Fundamentals – 15% Using Basic Transforming Commands – 15% Creating Reports and Dashboards – 12 % Creating and Using Lookups – 6% Creating Scheaduled Reports and alerts – […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/blog.visualization.sk\/index.php?rest_route=\/wp\/v2\/posts\/55"}],"collection":[{"href":"https:\/\/blog.visualization.sk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.visualization.sk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.visualization.sk\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.visualization.sk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=55"}],"version-history":[{"count":6,"href":"https:\/\/blog.visualization.sk\/index.php?rest_route=\/wp\/v2\/posts\/55\/revisions"}],"predecessor-version":[{"id":64,"href":"https:\/\/blog.visualization.sk\/index.php?rest_route=\/wp\/v2\/posts\/55\/revisions\/64"}],"wp:attachment":[{"href":"https:\/\/blog.visualization.sk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=55"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.visualization.sk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=55"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.visualization.sk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=55"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}