Splunk Intro to Dashboards Quiz Study Questions

What are the two dashboard workflows? - Save search results to a dashboard - Click Create Dashboard on the Dashboards page - Click Prototype on the Dashboards page

- Save search results to a dashboard - Click Create Dashboard on the Dashboards page

What does refreshType: delay do? - Prevents refresh - Starts counting when the search is dispatched - Starts counting down when the search is done

- Starts counting down when the search is done

The tstats command _______________. - is a generating command - performs statistical queries on indexed fields in tsidx files - supports wildcards in field values in aggregate functions of BY clauses

- performs statistical queries on indexed fields in tsidx files

Which data source types are controlled by a time range input? -ds.test -ds.search -ds.savedSearch -ds.chain

-ds.search -ds.savedSearch -ds.chain

What is a global search? A dashboard with a base search A dashboard with multiple chain searches A dashboard with single base search with chain searches that drive all the visualizations

A dashboard with a base search

What does accelerating data models do? a) Accelerates all fields in the data model b) Limits the search time range to 30 minutes or less c) Creates time-series index (TSIDX) files

a) Accelerates all fields in the data model c) Creates time-series index (TSIDX) files

Which features are only available in absolute layouts? a) Gridlines b) Background images c) Charts

a) Gridlines b) Background images

What is wireframing? a) Preliminary drawings that define a dashboard's interface and interactive elements. b) Using code to link dashboard visualizations c) Adding interactivity to a dashboard.

a) Preliminary drawings that define a dashboard's interface and interactive elements.

Which property is required in the chart options stanza for an event annotation? a) annotationLabel b) annotationX c) annotation_time

a) annotationLabel

Which property is required in the chart options stanza to add a color to an event annotation? a) annotationColor b) annotation_time c) annotationX

annotationColor

The dashboard studio has which types of layouts? a) absolute b) Row and Column c) Grid

Absolute and Grid

Where is the unique ID for a data source referenced? The visualization's dataSources stanza The Dashboard Definition dataSources section Both the Dashboard Definition dataSources section and the visualization dataSources stanza

Both the Dashboard Definition dataSources section and the visualization dataSources stanza

Which of the following can be a primary data source? - Mock Data - Annotation - Saved search (report) - Inline search - Chain search

Chain search, saved search, inline search

What does accelerating reports do? Periodically ages out data Can use event sampling Creates summaries to speed search completion time

Creates summaries to speed search completion time

Which is the new dashboard framework? Dashboard Studio (JSON) Classic Dashboards (Simple XML) Splunk Web Framework (SplunkJS)

Dashboard Studio (JSON)

What is the dashboard definition? a) Text added to the top of a dashboard beneath the title b) Five sections in the JSON source code of a Dashboard Studio dashboard c) A .conf file that defines a dashboard

Five sections in the JSON source code of a Dashboard Studio dashboard

What does using the tstats command with summariesonly=t argument do? Enables using tstats with a base search Generates results from both summarized and non-summarized data Generates results from summarized data

Generates results from summarized data

What does a base search do? a) The base search gathers statistics for downline processing by a chain search b) The base search performs processing of chain search results c) The base search performs processing of chain search results

The base search gathers statistics for downline processing by a chain search

What source code is used for Dashboard Studio dashboards? - json - xml - html

JSON

What source code is used for classic dashboards? HTML Simple XML JSON

Simple XML

When using the ds.test data source type, where are columns and fields stanzas placed? a) In the encoding stanza of the visualization b) In the visualization stanza c) In the data stanza under options for the data source

b) In the visualization stanza c) In the data stanza under options for the data source

Which data source type can only be added using the source editor? a) ds.search b) ds.test c) ds.savedSearch d) ds.chain

b) ds.test

A dashboard with single base search with chain searches that drive all the visualizations ds.search ds.savedSearch ds.chain ds.test

ds.chain

When a data source is added to a dashboard it is________________ is listed on the Searches, Reports, and Alerts page. is not removed when the visualization it is linked to is deleted. is removed when the visualization it is linked to is deleted.

is not removed when the visualization it is linked to is deleted.