Splunk Core Certified User Practice Exam

How do you add attribute rows to a new pivot?

1. Use the "+" symbol under "Split Rows"

2. Select from the dashboard options

3. Right-click the attribute list

4. Drag and drop the attributes

The correct answer is: Use the "+" symbol under "Split Rows"

To add attribute rows to a new pivot in Splunk, the process involves utilizing the "+" symbol under "Split Rows." This action specifically allows you to expand the pivot by adding additional dimensions to your analysis. When you click the "+" symbol, a dialogue typically appears, enabling you to select the specific attributes you wish to include in the pivot, effectively allowing you to redefine or enhance the data presentation according to your analytical needs. The other methods listed are not the primary ways to add rows in this context. The dashboard options generally pertain to visual customization or the layout of the dashboard rather than altering the pivot directly. Right-clicking the attribute list may provide further options but does not directly add rows; it is more about interaction with the data rather than modification. Similarly, while drag and drop could be utilized in some contexts within Splunk, it is not the standard method for adding rows in the pivot interface, further underscoring the relevance and accuracy of using the "+" symbol for this specific function.