A Splunk user runs the search `index=app sourcetype=log | chart count by status_code` and gets a chart. The user then wants to modify the chart to show the count of each status code as a percentage of the total. The user tries to use the 'Show percentage' option in the chart properties, but it is grayed out. What is the most likely reason?

The user does not have permission to change chart properties

The search does not return enough data

The chart command does not support percentage calculations

The chart type is not set to a pie chart

An analyst wants to create a line chart showing the average CPU utilization of three servers (web01, web02, web03) over the last 24 hours. The search `index=os sourcetype=cpu | timechart avg(usage) by host` produces a chart, but the lines are difficult to distinguish because they are all similar colors. Which approach would best improve the readability of the chart?

Add a `where` clause to filter the data

Use the `chart` command instead of `timechart`

Change the chart type to a pie chart

Configure the chart's series colors in the visualization settings

A Splunk user creates a bar chart showing the number of support tickets by priority (High, Medium, Low). The chart is for a report, and the user wants to add a clear title and label the axes. Which configuration steps are required?

Edit the search to add `| rename` commands for the fields

Add a `table` command to the search

Use the 'Format' menu in the visualization tab to set the chart title and axis labels

Change the chart type to a column chart

SplunkCore Certified User

Domain 6Objective 4

Create Reports That Display Visualizations (charts) SPLK-1001 Practice Questions (Page 1)

Part of the Creating Reports and Dashboards domain, which accounts for 12% of the SPLK-1001 exam. Splunk does not publish an official question count, but from its 60-minute exam (~25–40 total, ~3–5 in this domain), expect 1–1 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

6concepts

12%of the exam

Questions 1–5

1expert · hard
A Splunk user runs the search `index=app sourcetype=log | chart count by status_code` and gets a chart. The user then wants to modify the chart to show the count of each status code as a percentage of the total. The user tries to use the 'Show percentage' option in the chart properties, but it is grayed out. What is the most likely reason?
Select an answer first
2foundation · easy
After running a search in Splunk, where can a user switch the results to a chart visualization without modifying the search?
Select an answer first
3application · medium
An analyst wants to create a line chart showing the average CPU utilization of three servers (web01, web02, web03) over the last 24 hours. The search `index=os sourcetype=cpu | timechart avg(usage) by host` produces a chart, but the lines are difficult to distinguish because they are all similar colors. Which approach would best improve the readability of the chart?
Select an answer first
4foundation · easy
Which Splunk search command is used to generate data that can be displayed as a chart?
Select an answer first
5application · medium
A Splunk user creates a bar chart showing the number of support tickets by priority (High, Medium, Low). The chart is for a report, and the user wants to add a clear title and label the axes. Which configuration steps are required?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-1001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-1001” is a trademark of its owner, used for identification only.

Create Reports That Display Visualizations (charts) SPLK-1001 Practice Questions (Page 1)

Questions 1–5

After running a search in Splunk, where can a user switch the results to a chart visualization without modifying the search?

Which Splunk search command is used to generate data that can be displayed as a chart?

A Splunk user creates a bar chart showing the number of support tickets by priority (High, Medium, Low). The chart is for a report, and the user wants to add a clear title and label the axes. Which configuration steps are required?

Keep studying — Creating Reports and Dashboards