Splunk Intro to Dashboards Quiz Study Questions
What are the two dashboard workflows? - Save search results to a dashboard - Click Create Dashboard on the Dashboards page - Click Prototype on the Dashboards page
- Save search results to a dashboard - Click Create Dashboard on the Dashboards page
What does refreshType: delay do? - Prevents refresh - Starts counting when the search is dispatched - Starts counting down when the search is done
- Starts counting down when the search is done
The tstats command _______________. - is a generating command - performs statistical queries on indexed fields in tsidx files - supports wildcards in field values in aggregate functions of BY clauses
- performs statistical queries on indexed fields in tsidx files
Which data source types are controlled by a time range input? -ds.test -ds.search -ds.savedSearch -ds.chain
-ds.search -ds.savedSearch -ds.chain
What does accelerating reports do? Periodically ages out data Can use event sampling Creates summaries to speed search completion time
Creates summaries to speed search completion time
What is the dashboard definition? a) Text added to the top of a dashboard beneath the title b) Five sections in the JSON source code of a Dashboard Studio dashboard c) A .conf file that defines a dashboard
Five sections in the JSON source code of a Dashboard Studio dashboard
What does using the tstats command with summariesonly=t argument do? Enables using tstats with a base search Generates results from both summarized and non-summarized data Generates results from summarized data
Generates results from summarized data
What source code is used for Dashboard Studio dashboards? - json - xml - html
JSON
What source code is used for classic dashboards? HTML Simple XML JSON
Simple XML
What does a base search do? a) The base search gathers statistics for downline processing by a chain search b) The base search performs processing of chain search results c) The base search performs processing of chain search results
The base search gathers statistics for downline processing by a chain search
What does accelerating data models do? a) Accelerates all fields in the data model b) Limits the search time range to 30 minutes or less c) Creates time-series index (TSIDX) files
a) Accelerates all fields in the data model c) Creates time-series index (TSIDX) files
Which features are only available in absolute layouts? a) Gridlines b) Background images c) Charts
a) Gridlines b) Background images
What is wireframing? a) Preliminary drawings that define a dashboard's interface and interactive elements. b) Using code to link dashboard visualizations c) Adding interactivity to a dashboard.
a) Preliminary drawings that define a dashboard's interface and interactive elements.
Which property is required in the chart options stanza for an event annotation? a) annotationLabel b) annotationX c) annotation_time
a) annotationLabel
Which property is required in the chart options stanza to add a color to an event annotation? a) annotationColor b) annotation_time c) annotationX
annotationColor
When using the ds.test data source type, where are columns and fields stanzas placed? a) In the encoding stanza of the visualization b) In the visualization stanza c) In the data stanza under options for the data source
b) In the visualization stanza c) In the data stanza under options for the data source
Which data source type can only be added using the source editor? a) ds.search b) ds.test c) ds.savedSearch d) ds.chain
b) ds.test
A dashboard with single base search with chain searches that drive all the visualizations ds.search ds.savedSearch ds.chain ds.test
ds.chain
When a data source is added to a dashboard it is________________ is listed on the Searches, Reports, and Alerts page. is not removed when the visualization it is linked to is deleted. is removed when the visualization it is linked to is deleted.
is not removed when the visualization it is linked to is deleted.
What is a global search? A dashboard with a base search A dashboard with multiple chain searches A dashboard with single base search with chain searches that drive all the visualizations
A dashboard with a base search
The dashboard studio has which types of layouts? a) absolute b) Row and Column c) Grid
Absolute and Grid
Where is the unique ID for a data source referenced? The visualization's dataSources stanza The Dashboard Definition dataSources section Both the Dashboard Definition dataSources section and the visualization dataSources stanza
Both the Dashboard Definition dataSources section and the visualization dataSources stanza
Which of the following can be a primary data source? - Mock Data - Annotation - Saved search (report) - Inline search - Chain search
Chain search, saved search, inline search
Which is the new dashboard framework? Dashboard Studio (JSON) Classic Dashboards (Simple XML) Splunk Web Framework (SplunkJS)
Dashboard Studio (JSON)