IBM C1000-156 Exam - Topic 8 Question 33 Discussion

Actual exam question for IBM's C1000-156 exam

Question #: 33
Topic #: 8

A ORadar administrator creates a new saved search in QRadar and wants to add the search to a dashboard, but the option "Include in my Dashboard" cannot be selected.

What is a possible reason it is unavailable?

AThe search is not grouped.

BThe option is valid only for searches based on events.

CThe option is valid only for searches based on flows.

DThe user does not sufficient permissions.

Show Suggested Answer

Suggested Answer: D

If the option 'Include in my Dashboard' cannot be selected when creating a saved search in IBM QRadar SIEM V7.5, a possible reason is insufficient permissions. Here's why:

Permissions: The user needs appropriate permissions to add saved searches to the dashboard.

Role-Based Access Control: QRadar uses role-based access control to manage user permissions. The user's role must include the necessary privileges to modify dashboards.

Verification: Ensure that the user has the correct permissions assigned. This can be checked and adjusted in the user management settings.

Reference IBM QRadar SIEM administration guides explain the permissions required for various actions, including adding saved searches to dashboards, and how to configure user roles and permissions.

by Johna at Aug 18, 2025, 07:28 PM

Limited Time Offer

25%

Off

Get Premium C1000-156 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Valentin

2 months ago

Definitely a permissions issue, I've seen that before.

upvoted 0 times

...

Virgina

2 months ago

I thought it was about permissions, though?

upvoted 0 times

...

Virgina

3 months ago

The option is only for event-based searches, that's correct.

upvoted 0 times

...

Lanie

3 months ago

Wait, you can't add flow searches to dashboards? That's weird!

upvoted 0 times

...

Yoko

3 months ago

It's probably because the search isn't grouped.

upvoted 0 times

...

Wynell

3 months ago

I feel like I saw something about flows and events in my notes, but I can't recall which one is required for dashboard inclusion. This is tricky!

upvoted 0 times

...

Rory

4 months ago

I practiced a question like this, and I think it could be related to user permissions. If the user doesn't have enough rights, that option might be greyed out.

upvoted 0 times

...

Hortencia

4 months ago

I'm not entirely sure, but I think the option might only apply to event-based searches. I need to double-check that.

upvoted 0 times

...

Amina

4 months ago

I remember something about saved searches needing to be grouped to be added to dashboards, so maybe that's the issue here?

upvoted 0 times

...

Valda

4 months ago

I think the key here is understanding the differences between event-based and flow-based searches in QRadar. That should help me narrow down the correct answer.

upvoted 0 times

...