Describe Alerts SPLK-1001 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the purpose of setting a severity level on an alert in Splunk?

   • ATo determine which users can see the alert
   • BTo control how often the alert runs
   • CTo indicate the importance or urgency of the alert
   • DTo specify the email address for notifications
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which statement best describes how an alert functions in Splunk?

   • AIt requires manual user intervention to execute
   • BIt only works with real-time data and cannot be scheduled
   • CIt runs a search and takes action when the search returns results that meet the alert condition
   • DIt permanently modifies the underlying indexed data
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is a valid action that an alert can trigger in Splunk?

   • AModify the index configuration
   • BDelete events from the index
   • CRestart the Splunk service
   • DSend an email notification
   Reveal Solution Discussion Select an answer first
5. 4expert · medium

   An admin has an alert that triggers on a critical error. The alert action is set to send an email to the on-call engineer and run a script that restarts a service. The admin wants to ensure that the script runs every time the alert triggers, but the email should only be sent once per hour. What is the best approach?

   • ACreate two alerts: one for the script with no throttling, and one for the email with 1-hour throttling
   • BSet the alert to trigger on a summary count instead of per-result
   • CUse a webhook instead of email for the notification
   • DSet throttling to 1 hour on the alert
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is an example of an alert condition in Splunk?

   • ATrigger when a user logs into the Splunk web interface
   • BTrigger when the Splunk server is restarted
   • CTrigger when the search returns more than 100 events
   • DTrigger when the index size exceeds 10 GB
   Reveal Solution Discussion Select an answer first