An admin is creating a GET workflow action that should appear on the 'src' and 'dest' fields. In the 'Apply to' section, the admin can select multiple fields. What is the correct way to configure this?

Use a wildcard in the 'Apply to' field, like 's*'.

Apply to 'All fields' and then use a search condition to filter.

Select both 'src' and 'dest' in the 'Apply to' field list.

Create two separate workflow actions, one for each field.

An admin creates a GET workflow action to open a geolocation service using the 'src' field. The action works when the admin clicks on the 'src' field value in a search result. However, the action also appears on the 'dest' field, which is not desired. What should the admin do to fix this?

Add a condition to the search to exclude the 'dest' field.

Edit the workflow action and change the 'Apply to' setting to only the 'src' field.

Change the URI to use $dest$ instead of $src$.

Delete the workflow action and recreate it as a POST action.

A team wants to create a workflow action that opens a web-based lookup tool with the selected field value as a query parameter. They need the action to work in Splunk Web and be available on a specific field. What should they create?

A POST workflow action with a URI containing a placeholder for the field value.

A field alias that transforms the field value.

A search macro that generates a URL.

A GET workflow action with a URI containing a placeholder for the field value.

An admin creates a GET workflow action and applies it to the 'user' field. After saving, the action does not appear on any field values in search results. What should the admin check first?

Verify that the search results actually contain the 'user' field.

Check that the workflow action type is set to POST.

Confirm the label is not too long.

SplunkCore Certified Power User

Domain 8Objective 2

Create a GET Workflow Action SPLK-1002 Practice Questions (Page 1)

Part of the Creating and Using Workflow Actions domain, which accounts for 10% of the SPLK-1002 exam. Splunk does not publish an official question count, but from its 60-minute exam (~25–40 total, ~3–4 in this domain), expect 1–1 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

6concepts

10%of the exam

Questions 1–5

1application · medium
An admin is creating a GET workflow action that should appear on the 'src' and 'dest' fields. In the 'Apply to' section, the admin can select multiple fields. What is the correct way to configure this?
Select an answer first
2application · medium
An admin creates a GET workflow action to open a geolocation service using the 'src' field. The action works when the admin clicks on the 'src' field value in a search result. However, the action also appears on the 'dest' field, which is not desired. What should the admin do to fix this?
Select an answer first
3application · medium
A team wants to create a workflow action that opens a web-based lookup tool with the selected field value as a query parameter. They need the action to work in Splunk Web and be available on a specific field. What should they create?
Select an answer first
4application · medium
An admin creates a GET workflow action and applies it to the 'user' field. After saving, the action does not appear on any field values in search results. What should the admin check first?
Select an answer first
5foundation · easy
After clicking 'New Workflow Action' in the Workflow Actions page, what is the first configuration choice the user must make?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-1002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-1002” is a trademark of its owner, used for identification only.