Intro to Knowledge Objects Flashcards
Which of the following file types can be uploaded to create a lookup?
- XML
- XLS
- CSV
CSV
By default, when a knowledge object is created, who can access its contents?
- The user who created it or a user with an admin role
- Any power user in the environment
- Any user of the app in which it was created
- Any user in the environment
The user who created it or a user with an admin role
Which two of the following knowledge object types can contain an eval expression?
- Macros
- Calculated fields
- Workflow actions
- Field aliases
Macros
Calculated fields
Which knowledge objects can be scheduled to execute at specific times?
- Workflow actions
- Alerts
- Macros
- Reports
Alerts
Reports
By default, what user role is required to make a knowledge object available to all apps?
Super User
Admin
Power User
User
Admin
Which knowledge object type can store entire search strings, including commands?
Calculated fields
Tags
Event types
Macros
Macros
Which knowledge object type can communicate with external sources using the HTTP GET and POST methods?
Lookups
Field extractions
Workflow actions
Search actions
Workflow Actions
Which of the following user roles can create knowledge objects?
- User
- Super User
- Power User
- Admin
User
Power User
Admin
What are the three predefined sharing options for a knowledge object?
- Shared in all apps
- Shared in app
- Blocked in app
- Private
Shared in all apps
Shared in app
Private
Which of the following methods can be used to manually extract fields?
- The Event Type Builder
- Regular Expressions, or RegEx
- Delimiters
- The Regular Expression Generator
Regular Expressions, or RegEx
Delimiters
Which knowledge object type can be searched in Pivot?
- Event types
- Data types
- Dashboards
- Data models
Data models
Where can you find a list of all fields returned from events?
- The fields library
- The fields sidebar
- The fields dropdown
- The fields posting list
The fields sidebar
When a user has left your organization, what happens to their knowledge objects?
- An admin can reassign them to another user.
- They are automatically reassigned to an admin.
- A power user can reassign them to another user.
- They are automatically reassigned to a power user.
An admin can reassign them to another user.
What are the primary functions of a workflow action?
- Passing information to external deployments to query additional indexes
- Communicating with an external source using the HTTP GET method
- Passing information back to Splunk to run a secondary search
- Communicating with an external source using the HTTP POST method
Communicating with an external source using the HTTP GET method
Passing information back to Splunk to run a secondary search
Communicating with an external source using the HTTP POST method
Which knowledge object type can contain an eval expression?
- Field aliases
- Calculated fields
- Tags
- Event types
Calculated fields
