exam questions

Exam SPLK-1001 All Questions

View all questions & answers for the SPLK-1001 exam

Exam SPLK-1001 topic 1 question 25 discussion

Actual exam question from Splunk's SPLK-1001
Question #: 25
Topic #: 1
[All SPLK-1001 Questions]

Which time range picker configuration would return real-time events for the past 30 seconds?

  • A. Preset - Relative: 30-seconds ago
  • B. Relative - Earliest: 30-seconds ago, Latest: Now
  • C. Real-time - Earliest: 30-seconds ago, Latest: Now
  • D. Advanced - Earliest: 30-seconds ago, Latest: Now
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
Reference:
https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Selecttimerangestoapply

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Janna05
Highly Voted 3 years, 9 months ago
C is correct https://docs.splunk.com/Documentation/Splunk/7.2.6/Search/Selecttimerangestoapply
upvoted 5 times
...
cyberWoof
Most Recent 2 weeks, 4 days ago
Selected Answer: B
The option Real-time is no longer present in the Time Range picker, in this scenario the Relative time picker makes sense https://docs.splunk.com/Documentation/Splunk/9.3.2/Search/Selecttimerangestoapply
upvoted 1 times
...
Flqm
1 year ago
Not sure why people are saying C, since in the time picker there is no "real-time" option - just presets, relative, date range, date and time range, and advanced. The only option that works with "earliest" and "latest" options using "30-seconds ago" and "Now" values, respectively, is the relative option; so B.
upvoted 2 times
...
Rider2053
1 year, 7 months ago
C is the right answer
upvoted 1 times
...
HUGOTE
2 years, 11 months ago
C. Real-time - Earliest: 30-seconds ago, Latest: Now
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago