Splunk SPLK-2001 Splunk Certified Developer Exam Practice Test

Which of the following is a way to monitor app performance? (Select all that apply.)

Which of the following are valid parent elements for the event action shown below? (Select all that apply.)

sourcetype=$click.value|s$

Which of the following is a customization option for the Open in Search panel link button?

A fellow Splunk administrator is reviewing an app that has been downloaded from splunkbase and deployed in an organization. The admin has e-mailed the following configuration snippet with a brief note that says ''fix the permissions''.

In what configuration file should the snippet be placed?

[]

access = read : [ * ], write : [ admin ] export - system

(Assume that $APP_HOME refers to the path that the app is installed, e.g. $SPLUNK_HOME/etc/apps/)

Which HTTP Event Collector (HEC) endpoint should be used to collect data in the following format?

{''message'':''Hello World'', ''foo'':''bar'', ''pony'':''buttercup''}

When output_mode is not used, which element of a feed is a human readable name for a returned entry?

When added to an app's default.meta file, which of the following makes one of its views available to other apps?