SPLK-1001 Fields Practice Questions

In the fields sidebar, which character denotes alphanumeric field values?

• AA. #
• BB. %
• CC. a
• DD. a#

How does Splunk determine which fields to extract from data?

• AA. Splunk only extracts the most interesting data from the last 24 hours.
• BB. Splunk only extracts fields users have manually specified in their data.
• CC. Splunk automatically extracts any fields that generate interesting visualizations.
• DD. Splunk automatically discovers many fields based on sourcetype and key/value pairs found in the data.

Which of the following fields is stored with the events in the index?

• AA. user
• BB. source
• CC. location
• DD. sourceIp