Splunk SPLK-1002 Practice Exams
Last updated on Oct 06,2026- Exam Code: SPLK-1002
- Exam Name: Splunk Core Certified Power User
- Certification Provider: Splunk
- Latest update: Oct 06,2026
Where are the results of eval commands stored?
- A . In a field.
- B . In an index.
- C . In a KV Store.
- D . In a database.
which of the following are valid options with the chart command
- A . useother
- B . usenull
- C . fillfield
- D . usefiled
Which of the following searches will return all clientip addresses that start with 108?
- A . … | where like (clientip, “108.% )
- B . … | where (clientip, "108. %")
- C . … | where (clientip=108. % )
- D . … | search clientip=108
Consider the the following search run over a time range of last 7 days:
index=web sourcetype=access_conbined | timechart avg(bytes) by product_nane
Which option is used to change the default time span so that results are grouped into 12 hour intervals?
- A . span=12h
- B . timespan=12h
- C . span=12
- D . timespan=12
For the following search, which command would further filter for only IP addresses present more than five times?
- A . index=games I stats count as IP_count by IP
- B . | where IP_count > 5
- C . index=games | search IP_Count > 5
- D . index=games | where IP > 5
- E . index=games I search IP > 5
Which group of users would most likely use pivots?
- A . Users
- B . Architects
- C . Administrators
- D . Knowledge Managers
When extracting fields, we may choose to use our own regular expressions
- A . True
- B . False
Which of the following statements describes POST workflow actions?
- A . Configuration of a POST workflow action includes choosing a sourcetype.
- B . POST workflow actions can be configured to send email to the URI location.
- C . By default, POST workflow action are shown in both the event and field menus.
- D . POST workflow actions can be configured to send POST arguments to the URI location.
When creating an event type, which is allowed in the search string?
- A . Tags
- B . Joins
- C . Subsearches
- D . Pipes
Information needed to create a GET workflow action includes which of the following? (select all that apply.)
- A . A name of the workflow action
- B . A URI where the user will be directed at search time.
- C . A label that will appear in the Event Action menu at search time.
- D . A name for the URI where the user will be directed at search time.