A security analyst wants to create a new dashboard from scratch in Splunk Web to display the top 10 source IPs by event count for the last 24 hours. The analyst has already saved a search that produces the desired results. What is the most efficient way to create this dashboard?

Export the saved search as a PDF and then import it into a new dashboard.

Create a new dashboard, then manually add a new panel and paste the saved search's SPL into the panel's search.

From the saved search, select 'Add to Dashboard' and choose 'New' to create a dashboard with a panel already populated.

Create a new dashboard and then use the 'Add Panel' button to select the saved search from a list of existing searches.

A dashboard has three panels: a large table, a small single value, and a medium line chart. The admin wants to arrange them so the single value appears at the top, with the table and line chart side by side below it. Which layout approach should they use?

Use the 'Add Panel' menu to insert a new row and then add panels to it.

Change the dashboard's time range to 'All time' so panels resize automatically.

Drag the single value panel to the top, then drag the table and line chart panels to the same row.

Edit the dashboard's XML source to set the panel widths to 50% each.

A dashboard has a panel that is displaying a table with too many columns, making it hard to read. The admin wants to reduce the number of columns shown. What is the most efficient way to do this?

Change the panel's visualization type to 'Single Value'.

Edit the panel's search to use `fields` or `table` to specify only the desired columns.

Use the panel's 'Format' settings to hide columns.

Delete the panel and add a new one with a simpler search.

SplunkCore Certified User

Domain 6Objective 5

Create a Dashboard SPLK-1001 Practice Questions (Page 5)

Part of the Creating Reports and Dashboards domain, which accounts for 12% of the SPLK-1001 exam. Splunk does not publish an official question count, but from its 60-minute exam (~25–40 total, ~3–5 in this domain), expect 1–1 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

5concepts

12%of the exam

Questions 21–23

21application · medium
A security analyst wants to create a new dashboard from scratch in Splunk Web to display the top 10 source IPs by event count for the last 24 hours. The analyst has already saved a search that produces the desired results. What is the most efficient way to create this dashboard?
Select an answer first
22application · medium
A dashboard has three panels: a large table, a small single value, and a medium line chart. The admin wants to arrange them so the single value appears at the top, with the table and line chart side by side below it. Which layout approach should they use?
Select an answer first
23expert · medium
A dashboard has a panel that is displaying a table with too many columns, making it hard to read. The admin wants to reduce the number of columns shown. What is the most efficient way to do this?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SPLK-1001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-1001” is a trademark of its owner, used for identification only.

Create a Dashboard SPLK-1001 Practice Questions (Page 5)

Questions 21–23

A security analyst wants to create a new dashboard from scratch in Splunk Web to display the top 10 source IPs by event count for the last 24 hours. The analyst has already saved a search that produces the desired results. What is the most efficient way to create this dashboard?

A dashboard has three panels: a large table, a small single value, and a medium line chart. The admin wants to arrange them so the single value appears at the top, with the table and line chart side by side below it. Which layout approach should they use?

A dashboard has a panel that is displaying a table with too many columns, making it hard to read. The admin wants to reduce the number of columns shown. What is the most efficient way to do this?

Keep studying — Creating Reports and Dashboards