SPLK-2001Preview

Suppose the following query in a Simple XML dashboard returns a table including hyperlinks:
<search>
<query>index news sourcetype web_proxy | table sourcetype title link
</query>
</search>
Which of the following is a valid dynamic drilldown element to allow a user of the dashboard to visit the hyperlinks contained in the link field?

Which of the following are benefits from using Simple XML Extensions? (Select all that apply.)

How can indexer acknowledgement be enabled for HTTP Event Collector (HEC)? (Select all that apply.)

Which of the following are characteristics of an add-on? (Select all that apply.)

What application security best practices should be adhered to while developing an app for Splunk? (Select all that apply.)

There is a global search named global_search defined on a form as shown below:
<search id=global_search>
<query>
index-_internal source-*splunkd.log | stats count by component, log_level
</query>
</search>
Which of the following would be a valid post-processing search? (Select all that apply.)

Which type of command is tstats?

Which of the following is an example of a Splunk KV store use case? (Select all that apply.)

Given the following two files defining app navigation, which navigation options will be displayed to the end user? (Select all that apply.)
$SPLUNK_HOME/etc/apps/app_name/default/data/ui/nav/default.xml
<nav search_view=search color=#65A637>
<view name=search default=˜true' /> <view name=datasets /> <view name=reports /> <view name=dashboards /> </nav> $SPLUNK_HOME/etc/apps/app_name/local/data/ui/nav/default/xml <nav search_view=search color=#65A637> <view name=search default=˜true' />
<view name=datasets />
<view name=dashboards />
</nav>

Which of the following are true of auto-refresh for dashboard panels? (Select all that apply.)

Which Splunk REST endpoint is used to create a KV store collection?

A KV store collection can be associated with a namespace for which of the following users?

Which of the following are types of event handlers? (Select all that apply.)

Which of the following describes a Splunk custom visualization?

Which of the following are reserved field names in a KV Store? (Select all that apply.)

Which of these URLs could be used to construct a REST request to search the employee KV store collection to find records with a rating greater than or equal to
2 and less than 5?

Which of the following Simple XML elements configure panel link buttons? (Select all that apply.)

Which of the following are requirements for arguments sent to the data/indexes endpoint? (Select all that apply.)

When using the Splunk REST API, which of the following containers is/are included in the Atom Feed response? (Select all that apply.)

A fellow Splunk administrator is reviewing an app that has been downloaded from splunkbase and deployed in an organization. The admin has e-mailed the following configuration snippet with a brief note that says fix the permissions.
In what configuration file should the snippet be placed?
[]
access = read : [ * ], write : [ admin ]
export - system
(Assume that $APP_HOME refers to the path that the app is installed, e.g. $SPLUNK_HOME/etc/apps/<app name>)

Given a dashboard with a Simple XML extension in myApp, what is the XML reference for the file myJS.js located in myOtherApp in the location shown below?
$SPLUNK_HOME/etc/apps/myOtherApp/appserver/static/javascript/

Which items below are configured in inputs.conf? (Select all that apply.)

Which of the following is an intended use of HTTP Event Collector tokens?

When the search/jobs REST endpoint is called to execute a search, what can be done to reduce the results size in the results? (Select all that apply.)

Which of the following are valid parent elements for the event action shown below? (Select all that apply.)
<set token=Token Name>sourcetype=$click.value|s$</set>