Splunk Core Certified Power User Exam Questions and Answers
Question 85
How does a user display a chart in stack mode?
Options:
A.
By using the stack command.
B.
By turning on the Use Trellis Layout option.
C.
By changing Stack Mode in the Format menu.
D.
You cannot display a chart in stack mode, only a timechart.
Answer:
C
Explanation:
A chart is a graphical representation of your search results that shows the relationship between two or more fields2. You can display a chart in stack mode by changing the Stack Mode option in the Format menu2. Stack mode allows you to stack multiple series on top of each other in a chart to show the cumulative values of each series2. Therefore, option C is correct, while options A, B and D are incorrect because they are not ways to display a chart in stack mode.
Question 86
Which of the following are required to create a POST workflow action?
Options:
A.
Label, URI, search string.
B.
XMI attributes, URI, name.
C.
Label, URI, post arguments.
D.
URI, search string, time range picker.
Answer:
C
Explanation:
POST workflow actions are custom actions that send a POST request to a web server when you click on a field value in your search results. POST workflow actions can be configured with various options, such as label name, base URL, URI parameters, post arguments, app context, etc. One of the options that are required to create a POST workflow action is post arguments. Post arguments are key-value pairs that are sent in the body of the POST request to provide additional information to the web server. Post arguments can include field values from your data by using dollar signs around the field names.