
SplunkCore Certified User
Domain 8Objective 2
Configure Scheduled Reports SPLK-1001 Practice Questions (Page 4)
Part of the Creating Scheduled Reports and Alerts domain, which accounts for 5% of the SPLK-1001 exam. Splunk does not publish an official question count, but from its 60-minute exam (~25–40 total, ~1–2 in this domain), expect 1–1 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)
19questions here
4free pages
4concepts
5%of the exam
Questions 16–19
- 16
A help desk manager wants a weekly report every Friday at 5:00 PM showing the number of tickets closed that week. They want the report to be available in Splunk for all help desk staff. What is the first step in creating this scheduled report?
Select an answer first - 17
A scheduled report is currently visible to all users in the 'Everyone' role. The security team wants only members of the 'SOC' role to see and run it. What should the admin do?
Select an answer first - 18
A manager wants to receive a PDF of a scheduled report via email every Monday morning. The report is already scheduled. What must the admin configure to make this happen?
Select an answer first - 19
A report must run at 11:15 PM on the last day of every month. Which cron expression should the admin use?
Select an answer first
Finished these 4 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to SPLK-1001
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-1001” is a trademark of its owner, used for identification only.