Splunk Fundamentals 1 Practice Exam

How do you add attribute rows to a new pivot?

1. Click the "+" symbol under "Split Rows" and select from the list

2. Click "Add Rows" and input the attributes

3. Drag and drop attributes into the pivot

4. Select attributes from the top menu

The correct answer is: Click the "+" symbol under "Split Rows" and select from the list

The correct method to add attribute rows to a new pivot in Splunk involves using the "+" symbol under the "Split Rows" section. This action allows you to open a menu from which you can select specific attributes that you wish to incorporate into the pivot table. By clicking this symbol, users can easily visualize and manage their data by organizing it into rows that provide more detailed insights based on the selected attributes. In the context of the other options, choosing to "Add Rows" directly and inputting attributes is not a standard method, as Splunk typically relies on the selection menus for data organization within pivots. Simply dragging and dropping attributes, although a common function in many interfaces, does not apply to the pivot creation process in Splunk, which necessitates structured selection. Lastly, selecting attributes from a top menu might suggest a different interface or method that isn't aligned with how pivot operations are designed; it’s not specific enough to denote the correct action of adding rows. Thus, the "+" symbol under "Split Rows" is the most appropriate and accurate way to perform the desired action.