SplunkCore Certified Power User
Domain 5Objective 2
Describe, Create, and Use Calculated Fields SPLK-1002 Practice Questions (Page 2)
Part of the Creating Field Aliases and Calculated Fields domain, which accounts for 10% of the SPLK-1002 exam. Splunk does not publish an official question count, but from its 60-minute exam (~25–40 total, ~3–4 in this domain), expect 2–2 from this objective — we provide 8 practice questions to prepare you well beyond it. (estimate)
8questions here
2free pages
4concepts
10%of the exam
Questions 6–8
- 6
What happens to existing searches that reference a calculated field when that field is deleted?
Select an answer first - 7
A security analyst frequently runs a search that extracts the source IP and destination IP from firewall logs. The analyst wants to create a field called 'traffic_direction' that shows 'inbound' when the destination IP is in the internal subnet 10.0.0.0/8, and 'outbound' otherwise. The analyst creates this field using eval in a saved search. Which statement correctly describes the behavior of this field?
Select an answer first - 8
In Splunk Web, where do you navigate to create a calculated field?
Select an answer first
Finished these 3 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to SPLK-1002
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-1002” is a trademark of its owner, used for identification only.