Which of the following is a valid example of a search query you can type into the Splunk search bar?

SELECT * FROM logs WHERE message='error'

error sourcetype=access_combined

After running a search, a user sees a list of fields in the left sidebar. They want to see only events that have a specific value for the 'status' field. What is the most efficient way to do this?

Save the search as a report and then open the report to see filtered events.

Use the timeline to zoom into the time range when the status value appears.

Click on the value in the 'status' field in the field sidebar to add it as a filter.

Manually edit the search query to add `| where status="value"`.

After typing a search query in the search bar, what is the standard action to execute the search and view results?

Press Enter or click the Search button

A user wants to access the 'Settings' menu to configure knowledge objects. Where is the 'Settings' menu located in the Splunk web interface?

In the left sidebar on the home page.

In the 'Search & Reporting' app's results page.

In the top bar, next to the app navigation.

When creating a dashboard panel, what is the typical source of the data displayed in the panel?

The list of users in the system

The contents of a configuration file

SplunkCore Certified User

Domain 1Objective 5

Basic Navigation in Splunk SPLK-1001 Practice Questions (Page 5)

Part of the Splunk Basics domain, which accounts for 5% of the SPLK-1001 exam. Splunk does not publish an official question count, but from its 60-minute exam (~25–40 total, ~1–2 in this domain), expect 1–1 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

6concepts

5%of the exam

Questions 21–25

21foundation · easy
Which of the following is a valid example of a search query you can type into the Splunk search bar?
Select an answer first
22application · medium
After running a search, a user sees a list of fields in the left sidebar. They want to see only events that have a specific value for the 'status' field. What is the most efficient way to do this?
Select an answer first
23foundation · easy
After typing a search query in the search bar, what is the standard action to execute the search and view results?
Select an answer first
24application · medium
A user wants to access the 'Settings' menu to configure knowledge objects. Where is the 'Settings' menu located in the Splunk web interface?
Select an answer first
25foundation · easy
When creating a dashboard panel, what is the typical source of the data displayed in the panel?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-1001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-1001” is a trademark of its owner, used for identification only.