SPLK-1004 · Question #41
What default Splunk role can use the Log Event alert action?
The correct answer is D. Admin. In Splunk, the Admin role (Option D) has the capability to use the Log Event alert action among many other administrative privileges. The Log Event alert action allows Splunk to create an event in an index based on the triggering of an alert, providing a way to log and track…
Question
What default Splunk role can use the Log Event alert action?
Options
- APower
- BUser
- Ccan_delete
- DAdmin
How the community answered
(29 responses)- B3% (1)
- C3% (1)
- D93% (27)
Explanation
In Splunk, the Admin role (Option D) has the capability to use the Log Event alert action among many other administrative privileges. The Log Event alert action allows Splunk to create an event in an index based on the triggering of an alert, providing a way to log and track alert occurrences over time. The Admin role typically encompasses a wide range of permissions, including the ability to configure and manage alert actions.
Topics
Community Discussion
No community discussion yet for this question.