View Fired Alerts SPLK-1001 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A user wants to see the details of a specific fired alert, including the search that was run and the results. They have clicked on the alert name. What page do they land on?

   • AThe search results page for that alert.
   • BThe job inspector for the alert's search.
   • CThe alert definition page, where they can edit the alert.
   • DThe fired alerts list, filtered to that alert.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A new Splunk user wants to see all alerts that have fired in the last 24 hours. They are on the 'Fired Alerts' page. What is the most efficient way to narrow down the list?

   • AExport the list to CSV and filter in Excel.
   • BClick on each alert to see its trigger time.
   • CScroll through the entire list and note the ones from the last 24 hours.
   • DUse the time range picker to select 'Last 24 hours'.
   Reveal Solution Discussion Select an answer first
4. 13expert · medium

   A Splunk admin is troubleshooting why an alert did not fire. They check the 'Fired Alerts' list and see no entries for that alert. What is the most likely reason?

   • AThe alert's action failed to execute.
   • BThe alert's search condition was not met during the scheduled time.
   • CThe user does not have permission to view the fired alerts.
   • DThe alert was deleted from the system.
   Reveal Solution Discussion Select an answer first
5. 14expert · medium

   A user wants to delete a fired alert entry, but the 'Delete' button is not visible. What is the most likely reason?

   • AThe fired alert entry is read-only because it is older than 30 days.
   • BThe alert is currently firing.
   • CThe alert was created by another user and is locked.
   • DThe user does not have permission to delete fired alerts.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A user wants to examine the exact search results that caused a specific alert to fire. They have opened the fired alerts list and found the entry. What should they do next?

   • AClick on the 'Delete' button to remove the alert entry.
   • BClick on the 'View results' link for that fired alert.
   • CClick on the 'Edit' button to modify the alert.
   • DClick on the alert name to open the alert definition.
   Reveal Solution Discussion Select an answer first