nerdexam
Splunk

SPLK-5002 · Question #38

Which syntax is correct to create two new rows on an existing threat intelligence collection?

The correct answer is C. curl -k -u admin:pass https://localhost:8089/services/data/threat_intel/item/email_intel -d. This syntax is valid because it passes multiple JSON objects inside a single array for the item parameter, ensuring both new rows are added to the collection in one request.

Threat Intelligence Integration

Question

Which syntax is correct to create two new rows on an existing threat intelligence collection?

Options

How the community answered

(30 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    83% (25)
  • D
    10% (3)

Explanation

This syntax is valid because it passes multiple JSON objects inside a single array for the item parameter, ensuring both new rows are added to the collection in one request.

Topics

#threat intel REST API#curl syntax#email intel collection#threat intel ingestion

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full SPLK-5002 Practice