The question ask about "troubleshooting views". A lot of people have missed this point.
Esentially views are finished product/results, so the answer should be B - In the search job inspector, AFTER the search completes. You can't see the finished product/results when the search is running.
Definition:
A view is essentially a page or interface that presents search results, visualizations, and forms in Splunk. It can be part of a dashboard or a standalone interface within an app.
C is correct
While the Search Job Inspector can show search results after completion, debug messages are often most helpful while the search is running to pinpoint issues. you do not have to wait until search is completed.
The correct answer is B. Look at the job inspector after completing the search.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Rounaldo
1 week agoteeec
2 weeks, 2 days agopoorisubash
1 month, 3 weeks agoadamsca
1 month, 3 weeks agoadpafer
2 months agoemlch
2 months, 1 week agoDerag
3 months ago