nerdexam
Splunk

SPLK-3002 · Question #79

ITSI Saved Search Scheduling is configured to use realtime_schedule = 0. Which statement is accurate about this configuration?

The correct answer is B. If this value is set to 0, the scheduler bases its determination of the next scheduled search on the. ITSI Saved Search Scheduling is a feature that allows you to schedule searches that run periodically to populate the data for your KPIs. You can configure various settings for your scheduled searches, such as the search frequency, the time range, the cron expression, and so on. O

Troubleshooting and Optimization

Question

ITSI Saved Search Scheduling is configured to use realtime_schedule = 0. Which statement is accurate about this configuration?

Options

  • AIf this value is set to 0, the scheduler bases its determination of the next scheduled search
  • BIf this value is set to 0, the scheduler bases its determination of the next scheduled search on the
  • CIf this value is set to 0, the scheduler may skip scheduled execution periods.
  • DIf this value is set to 0, the scheduler might skip some execution periods to make sure that the

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    79% (22)
  • C
    14% (4)
  • D
    4% (1)

Explanation

ITSI Saved Search Scheduling is a feature that allows you to schedule searches that run periodically to populate the data for your KPIs. You can configure various settings for your scheduled searches, such as the search frequency, the time range, the cron expression, and so on. One of the settings is realtime_schedule, which controls the way the scheduler computes the next execution time of a scheduled search. If this value is set to 0, the scheduler bases its determination of the next scheduled search on the last search execution time. This is called continuous scheduling. If set to 0, the scheduler never skips scheduled execution periods. However, the execution of the saved search might fall behind depending on the scheduler's load. Use continuous scheduling whenever you enable the summary index option.

Topics

#saved search scheduling#realtime_schedule#search optimization#scheduler

Community Discussion

No community discussion yet for this question.

Full SPLK-3002 Practice