Splunk
SPLK-3001 · Question #30
Who can delete an investigation?
The correct answer is A. ess_admin users only. https://docs.splunk.com/Documentation/ES/6.1.0/Admin/Manageinvestigations
Investigations and Incident Review
Question
Who can delete an investigation?
Options
- Aess_admin users only.
- BThe investigation owner only.
- CThe investigation owner and ess-admin.
- DThe investigation owner and collaborators.
How the community answered
(37 responses)- A95% (35)
- C3% (1)
- D3% (1)
Explanation
https://docs.splunk.com/Documentation/ES/6.1.0/Admin/Manageinvestigations
Topics
#investigations#access control#ess_admin#permissions
Community Discussion
No community discussion yet for this question.