Splunk
SPLK-3001 · Question #97
Which correlation search feature is used to throttle the creation of notable events?
The correct answer is C. Window duration. https://docs.splunk.com/Documentation/ES/6.1.0/Admin/Configurecorrelationsearches
Tuning Correlation Searches
Question
Which correlation search feature is used to throttle the creation of notable events?
Options
- ASchedule priority.
- BWindow interval.
- CWindow duration.
- DSchedule window.
How the community answered
(58 responses)- A5% (3)
- B2% (1)
- C86% (50)
- D7% (4)
Explanation
https://docs.splunk.com/Documentation/ES/6.1.0/Admin/Configurecorrelationsearches
Topics
#notable event throttling#window duration#correlation search features#event suppression
Community Discussion
No community discussion yet for this question.