SplunkCore Certified Power User
Domain 8Objective 3
Create a POST Workflow Action SPLK-1002 Practice Questions (Page 3)
Part of the Creating and Using Workflow Actions domain, which accounts for 10% of the SPLK-1002 exam. Splunk does not publish an official question count, but from its 60-minute exam (~25–40 total, ~3–4 in this domain), expect 1–1 from this objective — we provide 17 practice questions to prepare you well beyond it. (estimate)
17questions here
4free pages
5concepts
10%of the exam
Questions 11–15
- 11
An analyst frequently runs a search that returns a list of user accounts. They want a workflow action that sends the username of the clicked result to a ticketing system. The ticketing system expects a POST with a form-encoded body containing 'user'. Which token should be used in the POST parameters?
Select an answer first - 12
Which token syntax is used to reference a field value from the search result in a POST workflow action?
Select an answer first - 13
What is the recommended way to test a POST workflow action before deploying it to production?
Select an answer first - 14
A Splunk admin is creating a POST workflow action that sends a JSON payload to an external API. The API requires the request to have a specific content type. Where should the admin set the content type?
Select an answer first - 15
A Splunk admin needs to create a workflow action that sends the selected event's raw data to an external malware analysis service. The service accepts data via HTTP POST. Which type of workflow action should the admin create?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-1002” is a trademark of its owner, used for identification only.