Which of the following statements describes Search workflow actions?

Question

Options

• ABy default. Search workflow actions will run as a real-time search.
• BSearch workflow actions can be configured as scheduled searches,
• CThe user can define the time range of the search when created the workflow action.
• DSearch workflow actions cannot be configured with a search string that includes the transaction

• A
  3% (1)
• B
  5% (2)
• C
  90% (36)
• D
  3% (1)

Explanation

When creating a Search workflow action in Splunk, the creator can define the time range that the search will run over. This is a configurable option set at creation time. Search workflow actions do not run as real-time searches by default (eliminating A), cannot be configured as scheduled searches (eliminating B), and are not restricted from using the transaction command in their search string (eliminating D). The key characteristic is that the time range is defined when the workflow action is created.

No community discussion yet for this question.