Which of the following are ways to get a list of search jobs? (Select all that apply.)

A. Access Activity > Jobs with Splunk Web.

B. Use Splunk REST to query the /services/search/jobs endpoint.

C. Use Splunk REST to query the /services/saved/searches endpoint.

D. Use Splunk REST to query the /services/search/sid/results endpoint.

How can hiding or showing a panel by clicking on a chart or a table on the same form be performed?

A. By using vent drilldown.

B. By using workflow action.

C. By using contextual drilldown.

D. By using visualization drilldown.

Given the following two files defining app navigation, which navigation options will be displayed to the end

user? (Select all that apply.)

$SPLUNK_HOME/etc/apps/app_name/default/data/ui/nav/default.xml

$SPLUNK_HOME/etc/apps/app_name/local/data/ui/nav/default/xml

A. Search

B. Reports

C. Datasets

D. Dashboards

The response message from a successful Splunk REST call includes an element. What is contained in an element?

A. A dictionary of elements.

B. Metadata encapsulating the element.

C. A response code indicating success or failure.

D. An individual element in an collection.

Which of the following is a security best practice?

A. Enable XSS.

B. Eliminate all escape characters.

C. Ensure the app passes App Certification.

D. Ensure components have no Common Vulnerabilities and Exposures (CVE) vulnerabilities.

Which of the following ensures that quotation marks surround the value referenced by the token?

A. $token_name|s$

B. "$token_name$"

C. ($token_name$)

D. \"$token_name$\"

Which of the following are valid parent elements for the event action shown below? (Select all that apply.)

sourcetype=$click.value|s$

A.

B.

C.

D.

Which files within an app contain permissions information? (Select all that apply.)

A. local/metadata.conf

B. metadata/local.meta

C. default/metadata.conf

D. metadata/default.meta

A dashboard is taking too long to load. Several searches start with the same SPL. How can the searches be optimized in this dashboard? (Select all that apply.)

A. Convert searches to include NOT expressions.

B. Restrict the time range of the search as much as possible.

C. Replace | stats command with | transaction command wherever possible.

D. Convert the common SPL into a Global Search and convert the other searches to post-processing searches.

Which of the following will unset a token named my_token?

A. $my_token$

B.

C. false

D. disabled