Which workflow action type performs a secondary search?

The correct answer is D. Search. Splunk supports three workflow action types: GET (opens a URL via HTTP GET), POST (submits form data via HTTP POST), and Search (runs a secondary Splunk search using field values from the original event). The Search type is specifically designed to pivot from an event into a…

Creating and Using Workflow Actions

Question

Options

APOST
BDrilldown
CGET
DSearch

How the community answered

(18 responses)

C
6% (1)
D
94% (17)

Explanation

Splunk supports three workflow action types: GET (opens a URL via HTTP GET), POST (submits form data via HTTP POST), and Search (runs a secondary Splunk search using field values from the original event). The Search type is specifically designed to pivot from an event into a new SPL search, making it the correct answer for performing a secondary search.

Topics

#workflow actions#secondary search#Splunk features

Community Discussion

No community discussion yet for this question.

Full SPLK-1002 Practice