Which of the following is a false statement about Splunk dashboards?

Question

Options

• ADashboards must have a unique dashboard ID within a permission's context.
• BSplunk dashboards consist of one or more panels displaying data visually in a useful way.
• CSplunk dashboards may not be directly created from search results without first creating a report.
• DSplunk dashboard panels can be populated by reports.

• A
  4% (1)
• B
  4% (1)
• C
  81% (22)
• D
  11% (3)

Explanation

Option C is false because Splunk does allow you to create dashboards directly from search results - you can save a search and add it as a panel to a new or existing dashboard without first creating a standalone report. Options A, B, and D are all true: dashboard IDs must be unique within their permission context (A), dashboards are indeed composed of one or more visual data panels (B), and panels can absolutely be driven by saved reports (D). A quick memory tip: think of Splunk as flexible - it offers multiple paths to get data into a dashboard (inline searches, reports, or real-time searches), so any answer claiming a hard restriction on how you can create a dashboard should raise a red flag.

No community discussion yet for this question.