When setting Common Information Model (CIM) accelerations, which parameter should be defined to set how far back in time (specified as a relative time string) the Splunk platform creates its column…

The correct answer is C. Summary range. The Summary range parameter in CIM accelerations defines how far back in time (using a relative time string) the Splunk platform creates its column stores. This determines the historical coverage of accelerated data available for searches and dashboards.

Advanced Security Data Onboarding

Question

When setting Common Information Model (CIM) accelerations, which parameter should be defined to set how far back in time (specified as a relative time string) the Splunk platform creates its column stores?

Options

AMax summarization search time
BBackfill range
CSummary range
DAccelerate until maximum time

How the community answered

(50 responses)

A
10% (5)
B
4% (2)
C
84% (42)
D
2% (1)

Explanation

The Summary range parameter in CIM accelerations defines how far back in time (using a relative time string) the Splunk platform creates its column stores. This determines the historical coverage of accelerated data available for searches and dashboards.

Topics

#CIM acceleration#data model acceleration#summary range#column stores

Community Discussion

No community discussion yet for this question.

Full SPLK-5002 Practice