Creating Knowledge Objects

Question 1

Which function is used to send field values externally in Workflow Actions?

• GET
• POST
• Search
• PUT

Answer 1

POST

Question 2

Surround the macro name with the _____ when executing the macro in search.

• Backtick character
• Single quote character
• Double quote character
• Dollar sign

Answer 2

Backtick character

Question 3

Select all knowledge objects.

• lookups
• users
• workflow actions
• field aliases

Answer 3

lookups
workflow actions
field aliases

Question 4

When adding arguments to a macro, include the number of arguments in_____

• Parentheses after the macro name
• Using the pipe function
• Parentheses before the macro name
• Dollar signs with the search definition

Answer 4

Parentheses after the macro name

Question 5

True or False: Splunk knowledge objects can only be used privately.

TRUE
FALSE

Answer 5

False

Question 6

Which of the following are ways you can create an event type. Select all that apply.

• Settings > Event types > “New Event Type”
• Run a search, then save as Event Type
• From event details, select Event Actions > Build Event Type

Answer 6

Settings > Event types > “New Event Type”
Run a search, then save as Event Type
From event details, select Event Actions > Build Event Type

Question 7

Which workflow actions require you to specify if the behavior should open in a new window or current window? Select all that apply.

• POST
• Search
• PUT
• GET

Answer 7

POST
Search
GET

Question 8

If you have a tag label called “homeoffice” associated with the field/value pair system_ip=<your>, when you run a search using the tag=homeoffice constraint, what events will be returned?</your>

• events from _internal
• field lookup table
• events with the value of the system_ip field equal to your ip address

Answer 8

events with the value of the system_ip field equal to your ip address

Question 9

To perform a secondary search, use a _______ workflow action

• POST
• GET
• Search
• PUT

Answer 9

Search

Question 10

Which statement best describes the function of a Workflow Action

• Retrieves information from an external source x
• Allows users to interact with web resources x
• Uses field values to perform a secondary search x
• Sends field values to an external source x

Answer 10

Retrieves information from an external source
Allows users to interact with web resources
Uses field values to perform a secondary search
Sends field values to an external source