nerdexam
Splunk

SPLK-1004 · Question #20

Which element attribute is required for event annotation?

The correct answer is D. <search type="annotation">. In Splunk dashboards, event annotations are used to add informative overlays on timeline visualizations to mark significant events. The required element attribute to define an event annotation within a dashboard panel is <search type="annotation"> (Option D). This attribute…

Advanced Search Commands and Techniques

Question

Which element attribute is required for event annotation?

Options

  • A<search type="event_annotation">
  • B<search style="annotation">
  • C<search type=$annotation$>
  • D<search type="annotation">

How the community answered

(61 responses)
  • A
    7% (4)
  • B
    2% (1)
  • C
    3% (2)
  • D
    89% (54)

Explanation

In Splunk dashboards, event annotations are used to add informative overlays on timeline visualizations to mark significant events. The required element attribute to define an event annotation within a dashboard panel is <search type="annotation"> (Option D). This attribute specifies that the search within this element is intended to generate annotations, which are then overlaid on the timeline based on the time and information provided by the search results.

Topics

#event annotation#search type attribute#dashboard XML#annotation syntax

Community Discussion

No community discussion yet for this question.

Full SPLK-1004 Practice