Splunk SPLK-1002 Exam Topics
Splunk SPLK-1002 Exam Overview :
Exam Name: | Splunk Core Certified Power User |
Exam Code: | SPLK-1002 |
Certifications: | Splunk Core Certified Power User Certification |
See Expected Questions: | Splunk SPLK-1002 Expected Questions in Actual Exam |
Splunk SPLK-1002 Exam Objectives :
Section | Weight | Objectives |
---|---|---|
1.0 Using Transforming Commands for Visualizations | 5% | 1.1 Use the chart command 1.2 Use the timechart command |
2.0 Filtering and Formatting Results | 10% | 2.1 The eval command 2.2 Use the search and where commands to filter results 2.3 The fillnull command |
3.0 Correlating Events | 15% | 3.1 Identify transactions 3.2 Group events using fields 3.3 Group events using fields and time 3.4 Search with transactions 3.5 Report on transactions 3.6 Determine when to use transactions vs. stats |
4.0 Creating and Managing Fields | 10% | 4.1 Perform regex field extractions using the Field Extractor (FX) 4.2 Perform delimiter field extractions using the FX |
5.0 Creating Field Aliases and Calculated Fields | 10% | 5.1 Describe, create, and use field aliases 5.2 Describe, create, and use calculated fields |
6.0 Creating Tags and Event Types | 10% | 6.1 Create and use tags 6.2 Describe event types and their uses 6.3 Create an event type |
7.0 Creating and Using Macros | 10% | 7.1 Describe macros 7.2 Create and use a basic macro 7.3 Define arguments and variables for a macro 7.4 Add and use arguments with a macro |
8.0 Creating and Using Workflow Actions | 10% | 8.1 Describe the function of GET, POST, and Search workflow actions 8.2 Create a GET workflow action 8.3 Create a POST workflow action 8.4 Create a Search workflow action |
9.0 Creating Data Models | 10% | 9.1 Describe the relationship between data models and pivot 9.2 Identify data model attributes 9.3 Create a data model |
10.0 Using the Common Information Model (CIM) Add-On | 10% | 10.1 Describe the Splunk CIM 10.2 List the knowledge objects included with the Splunk CIM Add-On 10.3 Use the CIM Add-On to normalize data |
Official Information | https://www.splunk.com/pdfs/training/Splunk-Test-Blueprint-Power-User-v.1.1.pdf |
Updates in the Splunk SPLK-1002 Exam Topics:
Splunk SPLK-1002 exam questions and practice test are the best ways to get fully prepared. Study4exam's trusted preparation material consists of both practice questions and practice test. To pass the actual Splunk Core Certified Power User SPLK-1002 exam on the first attempt, you need to put in hard work on these questions as they cover all updated Splunk SPLK-1002 exam topics included in the official syllabus. Besides studying actual questions, you should take the Splunk SPLK-1002 practice test for self-assessment and actual exam simulation. Revise actual exam questions and remove your mistakes with the Splunk Core Certified Power User SPLK-1002 exam practice test. Online and Windows-based formats of the SPLK-1002 exam practice test are available for self-assessment.
- 50000+ Customers feedbacks involved in Products
- Customize your exam based on your objectives
- User-Friendly interface
- Exam History and Progress reports
- Self-Assessment Features
- Various Learning Modes