SPLK-1002 Exam Questions and Answers

Given the macro definition below, what should be entered into the Name and Arguments fields to correctly configure the macro?

The macro name is sessiontracker and the arguments are action, JESSIONID.
The macro name is sessiontracker(2) and the arguments are action, JESSIONID.
The macro name is sessiontracker and the arguments are $action$, $JESSIONID$.
The macro name is sessiontracker(2) and the Arguments are $action$, $JESSIONID$.

Answer(s): B

https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/Definesearchmacros

What is required for a macro to accept three arguments?

Answer(s): A

Which workflow action method can be used when the action type is set to link?

Answer(s): A

https://docs.splunk.com/Documentation/Splunk/8.0.3/Knowledge/SetupaGETworkflowaction

Which of the following statements about tags is true? (Choose all that apply.)

Answer(s): B,D

Which of the following statements about macros is true? (Choose all that apply.)

Arguments are defined at execution time.
Arguments are defined when the macro is created.
Argument values are used to resolve the search string at execution time.
Argument values are used to resolve the search string when the macro is created.

Answer(s): B,C

Splunk® SPLK-1002 Exam (page: 6) Splunk® Core Certified Power User Updated on: 25-Dec-2025