A Splunk app is configured to extract domain names in web service logs and specify them as a field named domain. What workflow action would return an external IP lookup for the field named domain?

The correct answer is C. GET. A GET workflow action opens a browser request to an external URL, passing field values as URL parameters - making it ideal for an external IP or domain lookup service. When a user clicks the workflow action on an event, Splunk constructs a URL (e.g…

Creating and Using Workflow Actions

Question

Options

APOST
BPUT
CGET
DSearch

How the community answered

(64 responses)

A
6% (4)
B
5% (3)
C
73% (47)
D
16% (10)

Explanation

A GET workflow action opens a browser request to an external URL, passing field values as URL parameters - making it ideal for an external IP or domain lookup service. When a user clicks the workflow action on an event, Splunk constructs a URL (e.g., https://lookup-service.com/ip?query=$domain$) and opens it in the browser. POST sends form data to a URL (typically used for submitting data). PUT is an HTTP method not used as a Splunk workflow action type. Search runs a new Splunk search, not an external lookup.

Topics

#Workflow Actions#External Lookups#GET request#Splunk Fields

Community Discussion

No community discussion yet for this question.

Full SPLK-1002 Practice