A new Splunk user is asked to create a dashboard that shows a table of recent login failures. They have never created a dashboard before. What is the first step they should take?

Ask an admin to create the dashboard for them.

Use the 'Search' app to create a report and then convert it to a dashboard.

Click 'Dashboards' in the app bar, then click 'Create New Dashboard'.

Run a search for login failures and then click 'Save As' and choose 'Dashboard Panel'.

A user wants to create a new dashboard from scratch in the Splunk web interface. Which sequence of actions accomplishes this?

Navigate to Search, run a search, and click Save As > Dashboard Panel to create a dashboard automatically.

Navigate to Reports, click New Report, and select Dashboard as the report type.

Navigate to Settings > Data Inputs and select Dashboard from the input type list.

Navigate to Dashboards, click Create New Dashboard, choose a layout, and then add panels.

A user has created a dashboard from scratch and wants to save it so that it appears in the 'Dashboards' list for all users in the company. What is the most appropriate way to save it?

Save it as a user dashboard and then change permissions to 'Read' for the 'Everyone' role.

Save it as a user dashboard and email the URL to all users.

Save it as a PDF and upload it to the company intranet.

Save it as an app dashboard in a shared app and set permissions to 'Read' for the appropriate roles.

A dashboard has a time picker input. The admin wants the panels to update automatically when the user selects a different time range. What is required for this to work?

The dashboard must be saved as an app dashboard.

The panels must be set to 'auto-refresh'.

The time picker must be set to 'All time'.

The panels' searches must use the `earliest` and `latest` tokens from the time picker.

A user wants to rearrange panels in a dashboard so that the most important chart appears at the top. What is the simplest way to do this in the Splunk web interface?

Drag and drop the panels into the desired positions in Edit mode.

Change the panel type to 'List' and sort alphabetically.

Edit the dashboard's XML source code and reorder the panel elements.

Delete all panels and recreate them in the desired order.

SplunkCore Certified User

Domain 6Objective 5

Create a Dashboard SPLK-1001 Practice Questions (Page 4)

Part of the Creating Reports and Dashboards domain, which accounts for 12% of the SPLK-1001 exam. Splunk does not publish an official question count, but from its 60-minute exam (~25–40 total, ~3–5 in this domain), expect 1–1 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

5concepts

12%of the exam

Questions 16–20

16application · easy
A new Splunk user is asked to create a dashboard that shows a table of recent login failures. They have never created a dashboard before. What is the first step they should take?
Select an answer first
17foundation · medium
A user wants to create a new dashboard from scratch in the Splunk web interface. Which sequence of actions accomplishes this?
Select an answer first
18expert · medium
A user has created a dashboard from scratch and wants to save it so that it appears in the 'Dashboards' list for all users in the company. What is the most appropriate way to save it?
Select an answer first
19application · medium
A dashboard has a time picker input. The admin wants the panels to update automatically when the user selects a different time range. What is required for this to work?
Select an answer first
20foundation · medium
A user wants to rearrange panels in a dashboard so that the most important chart appears at the top. What is the simplest way to do this in the Splunk web interface?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-1001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-1001” is a trademark of its owner, used for identification only.