Define the Process for Working with Splunk Cloud Support CLOUD-CERTIFIED-ADMIN Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A junior admin at a mid-sized company notices that scheduled searches in Splunk Cloud have stopped running overnight. The admin has already checked the documentation and community forums without finding a matching issue. The company has a Business (non-critical) support plan. Which action should the admin take to get the issue addressed by Splunk Cloud Support?

   • AEmail the assigned support engineer directly with a brief description of the problem and ask for a quick fix.
   • BOpen a case with severity 1 because all scheduled searches are failing, which affects the entire organization.
   • CPost the issue on the Splunk community forum and wait for a Splunk employee to respond with a fix.
   • DSubmit a case through the Splunk Support Portal, selecting severity 2 and including the search names, the environment name, and the time the issue started.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An admin submitted a case about a recurring indexing error. The case status changed to 'Pending' after the engineer asked for a sample of the data. What does this status change mean for the admin?

   • AThe case has been closed because the engineer could not reproduce the issue.
   • BThe engineer is working on the issue and will provide an update within 24 hours.
   • CThe case is waiting on the admin to provide the requested sample data before the engineer can continue.
   • DThe case has been escalated to a higher tier of support automatically.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A support engineer is investigating a data ingestion issue and has asked the admin to run a specific search and provide the output. The admin runs the search but gets an error. What should the admin do?

   • AReply to the case with the exact error message and ask the engineer for guidance on how to proceed.
   • BClose the case and reopen it later if the problem persists.
   • CRun a different search that the admin believes will provide similar information and submit those results.
   • DSkip the search and wait for the engineer to provide a different set of instructions.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An admin is submitting a case about a search that returns incorrect results. The admin has already verified the search logic and data. What additional detail is most useful to include in the case?

   • AThe total number of events in the index, without any other context.
   • BThe exact search string, the expected results, and an example of the actual results.
   • CThe admin's opinion on which component of Splunk is broken.
   • DA list of all users who have run the search in the past week.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the first step in submitting a support case to Splunk Cloud Support?

   • APost on the Splunk Community forum
   • BLog in to the Splunk Support Portal
   • CEmail support@splunk.com
   • DCall the support hotline
   Reveal Solution Discussion Select an answer first