A sales manager wants a table where each row is a product category, each column is a region, and the cell values show total sales. The current search produces three fields: category, region, and sales_amount. Which command transforms this into the desired pivot-like table?

| untable category region sales_amount

| table category region sales_amount | xyseries region category sales_amount

| stats sum(sales_amount) by category, region | xyseries category region

| xyseries category region sales_amount

What is the primary purpose of the `bin` command in a Splunk search?

To group field values into equally-sized buckets

To calculate statistical summaries like average or sum

To sort results by a specified field

To rename fields in the results

An operations analyst has a wide table with columns: server, cpu_usage, memory_usage, and disk_usage. They need to convert this into a tall format with columns: server, metric, and value. Which search correctly uses untable?

| untable server cpu_usage memory_usage disk_usage

SplunkCore Certified Advanced Power User

Domain 2Objective 4

Data Transformations core-certified-advanced-power-user Practice Questions (Page 1)

Part of the Fields, Lookups, and Data domain, which makes up ~17% of our current practice bank. Splunk does not publish an official question count, but from its 60-minute exam (~25–40 total, ~4–7 in this domain), expect 1–1 from this objective — we provide 14 practice questions to prepare you well beyond it. (estimate)

14questions here

3free pages

5concepts

Questions 1–5

1foundation · easy
Given a search that produces fields `user`, `action`, and `count`, which command would create a table with `user` as rows, `action` as columns, and `count` as the cell values?
Select an answer first
2application · medium
A sales manager wants a table where each row is a product category, each column is a region, and the cell values show total sales. The current search produces three fields: category, region, and sales_amount. Which command transforms this into the desired pivot-like table?
Select an answer first
3foundation · easy
What is the primary purpose of the `bin` command in a Splunk search?
Select an answer first
4foundation · easy
Which Splunk function formats a timestamp into a human-readable date and time string?
Select an answer first
5application · medium
An operations analyst has a wide table with columns: server, cpu_usage, memory_usage, and disk_usage. They need to convert this into a tall format with columns: server, metric, and value. Which search correctly uses untable?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to core-certified-advanced-power-user

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “core-certified-advanced-power-user” is a trademark of its owner, used for identification only.

Data Transformations core-certified-advanced-power-user Practice Questions (Page 1)

Questions 1–5

Given a search that produces fields `user`, `action`, and `count`, which command would create a table with `user` as rows, `action` as columns, and `count` as the cell values?

A sales manager wants a table where each row is a product category, each column is a region, and the cell values show total sales. The current search produces three fields: category, region, and sales_amount. Which command transforms this into the desired pivot-like table?

What is the primary purpose of the `bin` command in a Splunk search?

Which Splunk function formats a timestamp into a human-readable date and time string?

An operations analyst has a wide table with columns: server, cpu_usage, memory_usage, and disk_usage. They need to convert this into a tall format with columns: server, metric, and value. Which search correctly uses untable?

Keep studying — Fields, Lookups, and Data