A Splunk admin is configuring a POST workflow action that will be available on all fields in the event details. The action should send the field name and value to an external logging service. In the workflow action editor, where does the admin specify which fields the action applies to?

In the 'Method' field, select POST and then choose the fields from a dropdown.

In the 'Fields' section of the workflow action editor, select 'All fields'.

In the 'Label' field, include a token for the field name.

In the 'URI' field, add a query parameter for the field name.

What is the purpose of using custom tokens in a POST workflow action?

To include static or predefined values that are not directly from the search results

To change the HTTP method of the workflow action

To modify the search query that generated the results

To replace the search results with custom data

SplunkCore Certified Power User

Domain 8Objective 3

Create a POST Workflow Action SPLK-1002 Practice Questions (Page 4)

Part of the Creating and Using Workflow Actions domain, which accounts for 10% of the SPLK-1002 exam. Splunk does not publish an official question count, but from its 60-minute exam (~25–40 total, ~3–4 in this domain), expect 1–1 from this objective — we provide 17 practice questions to prepare you well beyond it. (estimate)

17questions here

4free pages

5concepts

10%of the exam

Questions 16–17

16application · easy
A Splunk admin is configuring a POST workflow action that will be available on all fields in the event details. The action should send the field name and value to an external logging service. In the workflow action editor, where does the admin specify which fields the action applies to?
Select an answer first
17foundation · easy
What is the purpose of using custom tokens in a POST workflow action?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SPLK-1002

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-1002” is a trademark of its owner, used for identification only.

Create a POST Workflow Action SPLK-1002 Practice Questions (Page 4)

Questions 16–17

A Splunk admin is configuring a POST workflow action that will be available on all fields in the event details. The action should send the field name and value to an external logging service. In the workflow action editor, where does the admin specify which fields the action applies to?

What is the purpose of using custom tokens in a POST workflow action?

Keep studying — Creating and Using Workflow Actions