SPLK-2003 · Question #95
Which of the following can be edited or deleted in the Investigation page?
The correct answer is B. Comments. On the Investigation page in Splunk SOAR, users have the ability to edit or delete comments associated with an event or a container. Comments are generally used for collaboration and to provide additional context to an investigation. While action results, approval records, and ar
Question
Which of the following can be edited or deleted in the Investigation page?
Options
- AAction results
- BComments
- CApproval records
- DArtifact values
How the community answered
(27 responses)- A7% (2)
- B89% (24)
- D4% (1)
Explanation
On the Investigation page in Splunk SOAR, users have the ability to edit or delete comments associated with an event or a container. Comments are generally used for collaboration and to provide additional context to an investigation. While action results, approval records, and artifact values are typically not editable or deletable to maintain the integrity of the investigative data, comments are more flexible and can be managed by users to reflect the current state of the Investigation page allows you to view and edit various information and data related to an event or a case. One of the things that you can edit or delete in the Investigation page is the comments that you or other users have added to the activity feed. Comments are a way of communicating and collaborating with other users during the investigation process. You can edit or delete your own comments by clicking on the three-dot menu icon next to the comment and selecting the appropriate option. You can also reply to other users' comments by clicking on the reply icon.
Topics
Community Discussion
No community discussion yet for this question.