An admin is creating a GET workflow action and needs to configure it so that the action appears as a link on field values. Which configuration options are required?

Label, Type (GET), URI, and Apply to fields

Label, Type (GET), and a time range

Label, Type (POST), URI, and Apply to fields

In a GET workflow action URI, what does the token $src_ip$ represent?

A placeholder that must be manually replaced by the user

The IP address of the Splunk server

A literal string that will be sent to the external system

The value of the field named src_ip from the search result

An admin creates a GET workflow action with the label 'VirusTotal' and URI 'https://www.virustotal.com/gui/search/$hash$'. The action is applied to the 'file_hash' field. When testing, the admin clicks the action on a hash value, but the browser opens a page that says 'Resource not found'. What is the most likely issue?

The label is too long, causing the action to be truncated.

The workflow action type is set to POST instead of GET.

The field 'file_hash' is not indexed.

The URI is incorrect or the external service expects a different URL format.

Which navigation path in Splunk Web is used to begin creating a new GET workflow action?

Apps > Manage Apps > Workflow Actions > New

Settings > Data Inputs > Workflow Actions > Add New

Settings > Fields > Workflow Actions > New Workflow Action

Search > Workflow Actions > Create

SplunkCore Certified Power User

Domain 8Objective 2

Create a GET Workflow Action SPLK-1002 Practice Questions (Page 3)

Part of the Creating and Using Workflow Actions domain, which accounts for 10% of the SPLK-1002 exam. Splunk does not publish an official question count, but from its 60-minute exam (~25–40 total, ~3–4 in this domain), expect 1–1 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

6concepts

10%of the exam

Questions 11–15

11application · medium
An admin is creating a GET workflow action and needs to configure it so that the action appears as a link on field values. Which configuration options are required?
Select an answer first
12foundation · easy
In a GET workflow action URI, what does the token $src_ip$ represent?
Select an answer first
13application · medium
An admin creates a GET workflow action with the label 'VirusTotal' and URI 'https://www.virustotal.com/gui/search/$hash$'. The action is applied to the 'file_hash' field. When testing, the admin clicks the action on a hash value, but the browser opens a page that says 'Resource not found'. What is the most likely issue?
Select an answer first
14foundation · easy
Which navigation path in Splunk Web is used to begin creating a new GET workflow action?
Select an answer first
15foundation · easy
When configuring a GET workflow action, which setting determines the destination URL that will be opened?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-1002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-1002” is a trademark of its owner, used for identification only.

Create a GET Workflow Action SPLK-1002 Practice Questions (Page 3)

Questions 11–15

An admin is creating a GET workflow action and needs to configure it so that the action appears as a link on field values. Which configuration options are required?

In a GET workflow action URI, what does the token $src_ip$ represent?

Which navigation path in Splunk Web is used to begin creating a new GET workflow action?

When configuring a GET workflow action, which setting determines the destination URL that will be opened?

Keep studying — Creating and Using Workflow Actions