Splunk Fundamentals - Scheduling Reports & Alerts

Q1) Which alert action allows you to send an event to your Splunk deployment for indexing?

(A) Create event
(B) Log event
(C) Generate event
(D) Generate log

Q2) Select the two valid types of alerts.

(A) Text message (SMS)
(B) Email
(C) Scheduled
(D) Real-time

Q3) Which of the following user roles are able to display a report in the app in which it was created?

(A) Power
(B) Admin
(C) User
(D) The user who created the report

Q4) Which Edit setting allows a report to be displayed to users outside of your organization?

(A) Embed
(B) Enable
(C) Permissions
(D) HTML

Q5) Which scheduled report setting helps determine when concurrent reports will run?

(A) Report Priority
(B) Schedule Priority
(C) Report Order
(D) Schedule Order

Q6) When are actions triggered for a real-time alert?

(A) As soon as alert conditions are met
(B) As soon as the related report is run
(C) Within a 60 second window of its cron schedule
(D) Within a five minute window of its cron schedule

Q7) Which alert setting allows you to control how many alert actions are taken when trigger conditions are met?

(A) Limit
(B) Throttle
(C) Schedule Priority
(D) Schedule Window

Q8) Which scheduled alert type will continuously run in the background?

(A) Automatic
(B) Constant
(C) Real-time
(D) Interval

Q9) What is a primary benefit of scheduling reports?

(A)Dashboard panels require scheduled reports in order to display up-to-date content.
(B) Scheduled reports take precedence over all other activity in your environment.
(C) Scheduling a report reduces the demand that concurrently running reports can put on your system hardware.
(D) When a scheduled report is run, all existing search jobs are terminated.

Q10) Which scheduled report setting allows you to define a time range for a report to run if it is delayed?

(A) Schedule Time Range
(B) Schedule Window
(C) Report Window
(D) Report Time Range

Q11) Which of the following prebuilt alert actions can be triggered when a report is run?

(A) Send a text message (SMS)
(B) Run a secondary report
(C) Output results to a lookup
(D) Send an email

Q12) Which alert action allows you to send a message to an external chat room?

(A) Output to text
(B) Output to chat
(C) Webhook
(D) API call

Q13) Which of the following user roles are able to display a report in all apps?

(A) User
(B) Admin
(C) Power
(D) The use who created the report

Q14) If a dashboard panel is powered by a scheduled report, how frequently will its contents update?

(A) Dashboard panels will update based on the dashboard's time range picker.
(B) The dashboard panel updates based on the underlying report's scheduling settings.
(C) The dashboard panel updates any time the dashboard is opened or manually refreshed.
(D) Dashboard panels cannot be linked to scheduled reports.