Splunk
SPLK-3002 · Question #59
After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?
The correct answer is A. 6 months.. By default, notable event metadata is archived after six months to keep the KV store from growing too large.
Anomaly Detection and Notable Events
Question
After a notable event has been closed, how long will the meta data for that event remain in the KV Store by default?
Options
- A6 months.
- B9 months.
- C1 year.
- D3 months.
How the community answered
(36 responses)- A89% (32)
- B6% (2)
- C3% (1)
- D3% (1)
Explanation
By default, notable event metadata is archived after six months to keep the KV store from growing too large.
Topics
#KV Store#notable events#data retention#metadata lifecycle
Community Discussion
No community discussion yet for this question.