Splunk SPLK-1002 Exam - Topic 9 Question 57 Discussion

Actual exam question for Splunk's SPLK-1002 exam

Question #: 57
Topic #: 9

In this search, __________ will appear on the y-axis. SEARCH: sourcetype=access_combined status!=200 | chart count over host

Astatus

Bhost

Ccount

Show Suggested Answer

Suggested Answer: C

by Lorrine at Aug 19, 2022, 11:13 AM

Limited Time Offer

25%

Off

Get Premium SPLK-1002 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shelton

4 months ago

I’m not so sure about that, feels like a trick question.

upvoted 0 times

...

Billy

4 months ago

Count is definitely C, can't be anything else!

upvoted 0 times

...

Ashlee

4 months ago

Wait, is it really B? That seems off.

upvoted 0 times

...

Shannon

4 months ago

I think it's A, status makes more sense.

upvoted 0 times

...

Brock

4 months ago

Definitely B, host will be on the y-axis.

upvoted 0 times

...

Zona

5 months ago

This question reminds me of a practice question where we had to identify what goes on the axes, and I think it was the count that we used.

upvoted 0 times

...

Ressie

5 months ago

I feel like the status might be relevant, but it seems more likely that the count would be what we see on the y-axis.

upvoted 0 times

...

Harley

5 months ago

I remember we did a charting exercise where the host was on the y-axis, but I can't recall if that's the case here.

upvoted 0 times

...

Ronnie

5 months ago

I think the y-axis should show the count, but I'm not entirely sure. We practiced something similar in class.

upvoted 0 times

...

Mose

5 months ago

I think the Case Lifecycle report type would be the best option here. It should give us the detailed breakdown of time spent in each status that the manager is looking for.

upvoted 0 times

...

Jenise

5 months ago

Okay, the key here is that the thread has been running for 20 minutes. Based on the default configuration, that means the thread state should be STUCK. I'm confident that's the right answer.

upvoted 0 times

...

Linwood

5 months ago

User views might limit access to sensitive info, but I'm not sure if that's enough on its own.

upvoted 0 times

...