nerdexam
Splunk

SPLK-1002 · Question #114

Which of the following statements describes POST workflow actions?

The correct answer is D. POST workflow actions can be configured to send POST arguments to the URI location.. POST workflow actions in Splunk are configured to submit HTTP POST arguments to a specified URI, enabling integration with external web services or applications.

Creating and Using Workflow Actions

Question

Which of the following statements describes POST workflow actions?

Options

  • AConfiguration of a POST workflow action includes choosing a sourcetype.
  • BPOST workflow actions can be configured to send email to the URI location.
  • CBy default, POST workflow action are shown in both the event and field menus.
  • DPOST workflow actions can be configured to send POST arguments to the URI location.

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    7% (2)
  • D
    85% (23)

Why each option

POST workflow actions in Splunk are configured to submit HTTP POST arguments to a specified URI, enabling integration with external web services or applications.

AConfiguration of a POST workflow action includes choosing a sourcetype.

POST workflow action configuration involves a URI and POST arguments, not a sourcetype selection.

BPOST workflow actions can be configured to send email to the URI location.

POST workflow actions send HTTP POST data to a URI endpoint; email delivery is a separate alert action, not a POST workflow action feature.

CBy default, POST workflow action are shown in both the event and field menus.

By default, POST workflow actions appear in the event context menu, but not necessarily in the field menu by default without additional configuration.

DPOST workflow actions can be configured to send POST arguments to the URI location.Correct

A POST workflow action allows you to define a target URI and a set of POST arguments (key-value pairs derived from event field values) that are submitted as an HTTP POST request. This is used to send event data to external systems such as ticketing or SIEM platforms.

Concept tested: Splunk POST workflow action configuration and behavior

Source: https://docs.splunk.com/Documentation/Splunk/latest/Knowledge/Workflowactionsoverview

Topics

#Workflow Actions#POST Actions#HTTP POST#Splunk Configuration

Community Discussion

No community discussion yet for this question.

Full SPLK-1002 Practice