nerdexam
Splunk

SPLK-1004 · Question #70

What capability does a power user need to create a Log Event alert action?

The correct answer is D. edit_alerts. To create a Log Event alert action in Splunk, a power user needs the edit_alerts capability (Option D). This capability allows the user to configure and manage alert actions, including setting up alerts to log specific events based on predefined conditions within Splunk's…

Macros and Saved Searches

Question

What capability does a power user need to create a Log Event alert action?

Options

  • Aedit_search_server
  • Bedit udp
  • Cedit_tcp
  • Dedit_alerts

How the community answered

(45 responses)
  • A
    7% (3)
  • B
    2% (1)
  • C
    4% (2)
  • D
    87% (39)

Explanation

To create a Log Event alert action in Splunk, a power user needs the edit_alerts capability (Option D). This capability allows the user to configure and manage alert actions, including setting up alerts to log specific events based on predefined conditions within Splunk's alerting

Topics

#alert actions#Log Event#power user#capabilities

Community Discussion

No community discussion yet for this question.

Full SPLK-1004 Practice