nerdexam
Splunk

SPLK-1001 · Question #184

When refining search results, what is the difference in the time picker between real-time and relative time ranges?

The correct answer is B. Real-time searches display results from a rolling time window, while relative searches display. The difference between real-time and relative time ranges in the time picker is that real-time searches display results from a rolling time window, such as the last 15 minutes, while relative searches display results from a set length of time, such as yesterday or last week…

Monitoring, logging, and remediation

Question

When refining search results, what is the difference in the time picker between real-time and relative time ranges?

Options

  • AReal-time searches happen instantly, while relative searches happen at a scheduled time.
  • BReal-time searches display results from a rolling time window, while relative searches display
  • CReal-time searches run constantly in the background, while relative searches only run when
  • DReal-time represents events that have happened in a set time window, while relative will display

How the community answered

(55 responses)
  • A
    4% (2)
  • B
    80% (44)
  • C
    11% (6)
  • D
    5% (3)

Explanation

The difference between real-time and relative time ranges in the time picker is that real-time searches display results from a rolling time window, such as the last 15 minutes, while relative searches display results from a set length of time, such as yesterday or last week. Real-time searches do not happen instantly, but rather update periodically based on the refresh interval. Relative searches do not happen at a scheduled time, but rather when the user runs them. Real- time searches do not run constantly in the background, but rather when the user starts them. Real-time searches do not represent events that have happened in a set time window, but rather events that are happening now.

Topics

#Splunk#time picker#real-time search#relative time range

Community Discussion

No community discussion yet for this question.

Full SPLK-1001 Practice