Splunk Core Certified User Exam (SPLK-1001) - Splunk Actual Exam Questions
Last updated on May 01, 2026
Which of the statements are correct? (Choose three.)
Zoom to selection: Narrows the time range and re-executes the search.
Zoom to selection: Narrows the time range and doesn't re-executes the search.
Format Timeline: Hides or shows the timeline in different views.
Zoom-Out: Expands the time focus and doesn't re-executes the search.
Zoom-out: Expands the time focus and re-executes the search.
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
When viewing results of a search job from the Activity menu, which of the following is displayed?
New events based on the current time range picker
The same events based on the current time range picker
The same events from when the original search was executed
New events in addition to the same events from the original search
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
What does the values function of the stats command do?
Lists all values of a given field.
Lists unique values of a given field.
Returns a count of unique values for a given field.
Returns the number of events that match the search.
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
This function of the stats command allows you to return the sample standard deviation of a field.
stdev
dev
count deviation
by standarddev
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
How do you add or remove fields from search results?
Use field +to add and field -to remove.
Use table +to add and table -to remove.
Use fields +to add and fields –to remove.
Use fields Plus to add and fields Minus to remove.
to join the discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.