A user has created a dashboard with a panel that shows a table of search results. They want to make the panel refresh automatically every 5 minutes. What is the correct way to configure this?

Save the search as a report and schedule it to run every 5 minutes.

Change the time range picker on the panel to 'Last 5 minutes'.

Use the 'Field sidebar' to set the refresh interval.

Edit the dashboard and set the 'Auto-refresh' interval for the panel to 5 minutes.

A user runs a search and sees a timeline with a large spike. They want to investigate the events during that spike. What is the most efficient way to focus on those events?

Edit the search query to add `| head 100` to see the first 100 events.

Click and drag on the timeline to select the spike period, then release to zoom in.

Use the 'Field sidebar' to filter by the field that caused the spike.

Change the time range picker to 'Last 15 minutes' and re-run the search.

Where can you find and manage your saved searches in Splunk Web?

In the Settings > Data inputs page

In the Searches and Reports section under the app's navigation

A team wants to monitor the number of errors per hour on a single screen. They have a search that counts errors by hour. What is the most efficient way to make this visible to the team?

Save the search as a report and share the report link with the team.

Create a dashboard and add a panel that uses the search to display a chart.

Use the 'Field sidebar' to create a chart from the fields.

Run the search and bookmark the results page in the browser.

On the Splunk search results page, what does the timeline at the top of the page display?

The distribution of events over time

The list of fields extracted from the events

SplunkCore Certified User

Domain 1Objective 5

Basic Navigation in Splunk SPLK-1001 Practice Questions (Page 4)

Part of the Splunk Basics domain, which accounts for 5% of the SPLK-1001 exam. Splunk does not publish an official question count, but from its 60-minute exam (~25–40 total, ~1–2 in this domain), expect 1–1 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

6concepts

5%of the exam

Questions 16–20

16application · medium
A user has created a dashboard with a panel that shows a table of search results. They want to make the panel refresh automatically every 5 minutes. What is the correct way to configure this?
Select an answer first
17expert · hard
A user runs a search and sees a timeline with a large spike. They want to investigate the events during that spike. What is the most efficient way to focus on those events?
Select an answer first
18foundation · easy
Where can you find and manage your saved searches in Splunk Web?
Select an answer first
19application · medium
A team wants to monitor the number of errors per hour on a single screen. They have a search that counts errors by hour. What is the most efficient way to make this visible to the team?
Select an answer first
20foundation · easy
On the Splunk search results page, what does the timeline at the top of the page display?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-1001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-1001” is a trademark of its owner, used for identification only.