ExamTopics Logo
Mail Us[email protected]
Menu
Splunk Discussions
exam questions

Exam SPLK-1001 All Questions

View all questions & answers for the SPLK-1001 exam
Go to Exam

Exam SPLK-1001 topic 1 question 200 discussion

Actual exam question from Splunk's SPLK-1001
Question #: 200
Topic #: 1
[All SPLK-1001 Questions]

In the Search and Reporting app, which is a default selected field?

  • A. index
  • B. host
  • C. _time
  • D. action
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by CookiesAreOP at Sept. 14, 2022, 6:39 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
CookiesAreOP
Highly Voted 1 year, 9 months ago
Selected Answer: B
host is a default SELECTED FIELDS. Index is in INTERESTING FIELDS by default
upvoted 6 times
...
mdoggy
Most Recent 11 months, 1 week ago
Selected Answer: B
host, source, sourcetype
upvoted 1 times
...
b5white
1 year, 5 months ago
This page says A and B https://docs.splunk.com/Documentation/SplunkCloud/latest/Knowledge/Usedefaultfields
upvoted 1 times
...
shin37564
1 year, 6 months ago
Selected Answer: B
B (host, source and sourcetype)
upvoted 2 times
...
awsguy21
1 year, 8 months ago
Selected fields are host, source and sourcetype. B
upvoted 2 times
...
nicksss
1 year, 8 months ago
Selected Answer: B
Agree with Cookies
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel