Intro to Knowledge Objects Flashcards

1
Q

Which of the following file types can be uploaded to create a lookup?

  • XML
  • PDF
  • XLS
  • CSV
A

CSV

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

By default, when a knowledge object is created, who can access its contents?

  • The user who created it or a user with an admin role
  • Any power user in the environment
  • Any user of the app in which it was created
  • Any user in the environment
A

The user who created it or a user with an admin role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which two of the following knowledge object types can contain an eval expression?

  • Macros
  • Calculated fields
  • Workflow actions
  • Field aliases
A

Macros
Calculated fields

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which knowledge objects can be scheduled to execute at specific times?

  • Workflow actions
  • Alerts
  • Macros
  • Reports
A

Alerts
Reports

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

By default, what user role is required to make a knowledge object available to all apps?

Super User
Admin
Power User
User

A

Admin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which knowledge object type can store entire search strings, including commands?

Calculated fields
Tags
Event types
Macros

A

Macros

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which knowledge object type can communicate with external sources using the HTTP GET and POST methods?

Lookups
Field extractions
Workflow actions
Search actions

A

Workflow Actions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which of the following user roles can create knowledge objects?

  • User
  • Super User
  • Power User
  • Admin
A

User
Power User
Admin

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are the three predefined sharing options for a knowledge object?

  • Shared in all apps
  • Shared in app
  • Blocked in app
  • Private
A

Shared in all apps
Shared in app
Private

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which of the following methods can be used to manually extract fields?

  • The Event Type Builder
  • Regular Expressions, or RegEx
  • Delimiters
  • The Regular Expression Generator
A

Regular Expressions, or RegEx
Delimiters

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which knowledge object type can be searched in Pivot?

  • Event types
  • Data types
  • Dashboards
  • Data models
A

Data models

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Where can you find a list of all fields returned from events?

  • The fields library
  • The fields sidebar
  • The fields dropdown
  • The fields posting list
A

The fields sidebar

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

When a user has left your organization, what happens to their knowledge objects?

  • An admin can reassign them to another user.
  • They are automatically reassigned to an admin.
  • A power user can reassign them to another user.
  • They are automatically reassigned to a power user.
A

An admin can reassign them to another user.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are the primary functions of a workflow action?

  • Passing information to external deployments to query additional indexes
  • Communicating with an external source using the HTTP GET method
  • Passing information back to Splunk to run a secondary search
  • Communicating with an external source using the HTTP POST method
A

Communicating with an external source using the HTTP GET method
Passing information back to Splunk to run a secondary search
Communicating with an external source using the HTTP POST method

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which knowledge object type can contain an eval expression?

  • Field aliases
  • Calculated fields
  • Tags
  • Event types
A

Calculated fields

How well did you know this?
1
Not at all
2
3
4
5
Perfectly