SPLK-2003 Question #8: Real Exam Question with Answer & Explanation

Question

Options

• AMore detailed logging information Is available in the Investigation page.
• BAll modifications to the playbook will be written to the audit log.
• CMore detailed information is available in the debug window.
• DThe playbook will write detailed execution information into the spawn.log.

Explanation

In Splunk SOAR (formerly known as Phantom), enabling the Logging option for a playbook's settings primarily affects how logging information is displayed on the Investigation page. When this option is enabled, more detailed logging information is made available on the Investigation page, which can be crucial for troubleshooting and understanding the execution flow of the playbook. This detailed information can include execution steps, actions taken, and conditional logic paths followed during the playbook run. It's important to note that enabling logging does not affect the audit logs or the debug window directly, nor does it write execution details to the spawn.log. Instead, it enhances the visibility and granularity of logs displayed on the specific Investigation page related to the playbook's

No community discussion yet for this question.