A Splunk admin has created a GET workflow action that should appear on the 'src_ip' field. After saving, the action appears on the 'dest_ip' field as well. What is the most likely cause?

The 'Apply to' setting was set to 'All fields' instead of 'src_ip'.

The URI contains a placeholder for 'dest_ip'.

The workflow action type is set to GET instead of POST.

An admin creates a GET workflow action with the label 'Open in External System' and URI 'https://ext.example.com/query?value=$field$'. The action is applied to the 'field' field. When testing, the admin notices that the action link appears, but clicking it opens a URL with the literal text '$field$' instead of the actual field value. What is the likely cause?

The field name in the placeholder does not match the actual field name.

The workflow action type is set to POST.

The 'Apply to' setting is set to 'All fields'.

What happens if a GET workflow action is configured with no fields selected?

It will appear on all fields by default

It will appear only on fields that contain URLs

It will cause an error when saving the action

It will not appear on any field value menu

In which part of Splunk Web does a user typically access a GET workflow action after it has been created?

From the Settings menu under Data Inputs

From the Apps menu in the top navigation bar

From the Jobs page in the Activity menu

From the menu that appears when clicking a field value in search results

What is the purpose of the 'Label' field when creating a GET workflow action?

It is the text that appears in the field value menu for users to click

It specifies which fields the action applies to

It defines the URL that the action will open

It determines the HTTP method used by the action

SplunkCore Certified Power User

Domain 8Objective 2

Create a GET Workflow Action SPLK-1002 Practice Questions (Page 4)

Part of the Creating and Using Workflow Actions domain, which accounts for 10% of the SPLK-1002 exam. Splunk does not publish an official question count, but from its 60-minute exam (~25–40 total, ~3–4 in this domain), expect 1–1 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

6concepts

10%of the exam

Questions 16–20

16application · medium
A Splunk admin has created a GET workflow action that should appear on the 'src_ip' field. After saving, the action appears on the 'dest_ip' field as well. What is the most likely cause?
Select an answer first
17application · medium
An admin creates a GET workflow action with the label 'Open in External System' and URI 'https://ext.example.com/query?value=$field$'. The action is applied to the 'field' field. When testing, the admin notices that the action link appears, but clicking it opens a URL with the literal text '$field$' instead of the actual field value. What is the likely cause?
Select an answer first
18foundation · easy
What happens if a GET workflow action is configured with no fields selected?
Select an answer first
19foundation · easy
In which part of Splunk Web does a user typically access a GET workflow action after it has been created?
Select an answer first
20foundation · easy
What is the purpose of the 'Label' field when creating a GET workflow action?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SPLK-1002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-1002” is a trademark of its owner, used for identification only.