Splunk SPLK-1001 Practice Exams
Last updated on Oct 07,2026- Exam Code: SPLK-1001
- Exam Name: Splunk Core Certified User
- Certification Provider: Splunk
- Latest update: Oct 07,2026
Question #81
What does the stats command do?
- A . Automatically correlates related fields
- B . Converts field values into numerical values
- C . Calculates statistics on data that matches the search criteria
- D . Analyzes numerical fields for their ability to predict another discrete field
Question #82
Use this command to use lookup fields in a search and see the lookup fields in the field sidebar.
- A . inputlookup
- B . lookup
Question #83
Which of the following Splunk components typically resides on the machines where data originates?
- A . Indexer
- B . Forwarder
- C . Search head
- D . Deployment server
Question #84
Which of the following are not true about lookups? (Select all that apply.)
- A . Lookups can be time based
- B . Search results can be used to populate a lookup table
- C . Splunk DB Connect can be used to populate a lookup table from relational databases
- D . Output from a script can be used to populate a lookup table
- E . Lookup have a 10mg maximum size limit
Question #85
By default, which of the following is a Selected Field?
- A . action
- B . clientip
- C . categoryld
- D . sourcetype
Question #86
When running searches command modifiers in the search string are displayed in what color?
- A . Red
- B . Blue
- C . Orange
- D . Highlighted
Question #87
Question #88
What can be configured using the Edit Job Settings menu?
- A . Export the results to CSV format
- B . Add the Job results to a dashboard
- C . Schedule the Job to re-run in 10 minutes
- D . Change Job Lifetime from 10 minutes to 7 days.
Question #89
Which statement is true about the top command?
- A . It returns the top 10 results
- B . It displays the output in table format
- C . It returns the count and percent columns per row
- D . All of the above
Question #90
This function of the stats command allows you to return the sample standard deviation of a field.
- A . stdev
- B . dev
- C . count deviation
- D . by standarddev