SPLK-5001 › SPL Search Proficiency
This domain covers writing and reading SPL in Splunk Enterprise and Splunk Cloud for security investigations. Questions present analyst scenarios—firewall traffic, blocked actions, missing fields—and ask you to choose the correct command, operator, or search clause. You must know search commands, boolean logic, field handling, and result formatting well enough to pick the right answer without running the search.
SPLK-5001 SPL Search Proficiency — All 77 Questions
Every question in this domain with answers and detailed explanations.