What options are available when creating custom roles? (select all that apply)

The correct answer is A. Restrict search terms C. Limit the number of concurrent search jobs D. Allow or restrict indexes that can be searched.. When creating custom roles in Splunk, you can: (A) Restrict search terms - limiting what search terms a role can use; (C) Limit the number of concurrent search jobs - capping how many searches a user in that role can run simultaneously; and (D) Allow or restrict indexes that can

Users and Roles

Question

Options

ARestrict search terms
BWhitelist search terms
CLimit the number of concurrent search jobs
DAllow or restrict indexes that can be searched.

How the community answered

(24 responses)

A
92% (22)
B
8% (2)

Explanation

When creating custom roles in Splunk, you can: (A) Restrict search terms - limiting what search terms a role can use; (C) Limit the number of concurrent search jobs - capping how many searches a user in that role can run simultaneously; and (D) Allow or restrict indexes that can be searched - controlling which indexes the role has access to. Option B ('Whitelist search terms') is incorrect because the correct terminology and functionality is 'Restrict search terms' (A) - Splunk uses a restriction model, not a whitelist model for this setting. 'Whitelist' is not a valid role configuration option in Splunk's interface.

Topics

#Custom roles#Role management#Search permissions#Index access

Community Discussion

No community discussion yet for this question.

Full SPLK-1003 Practice