exam questions

Exam SPLK-1002 All Questions

View all questions & answers for the SPLK-1002 exam

Exam SPLK-1002 topic 1 question 178 discussion

Actual exam question from Splunk's SPLK-1002
Question #: 178
Topic #: 1
[All SPLK-1002 Questions]

A user runs the following search:

index=X sourcetype=Y | chart count(domain) as count, sum(price) as sum by product, action usenull useother=f

Which of the following table headers match the order this command creates?

  • A. The chart command does not allow for multiple statistical functions.
  • B. Product, count: addtocart, count: remove, count: purchase, sum: addtocart, sum: remove, sum: purchase
  • C. Product, sum: addtocart, sum: remove, sum: purchase, count: addtocart, count: remove, count: purchase
  • D. Count: product, sum: product, count: action, sum: action
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
ismailwale
3 weeks, 3 days ago
Selected Answer: B
B: Explanation: The chart command in this search is aggregating data by product and action, applying two statistical functions: count on domain and sum on price. The result will produce a table where: The first header is Product (the first grouping field). The subsequent headers will represent the counts and sums for the actions associated with each product (addtocart, remove, and purchase). So, the correct ordering and headers based on how the command is structured is indeed: B. Product, count: addtocart, count: remove, count: purchase, sum: addtocart, sum: remove, sum: purchase
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago