Splunk Exam SPLK-1001 Topic 3 Question 74 Discussion

Actual exam question for Splunk's SPLK-1001 exam

Question #: 74
Topic #: 3

[All SPLK-1001 Questions]

Which statement is true about Splunk alerts?

AAlerts are based on searches that are either run on a scheduled interval or in real-time.

BAlerts are based on searches and when triggered will only send an email notification.

CAlerts are based on searches and require cron to run on scheduled interval.

DAlerts are based on searches that are run exclusively as real-time.

Show Suggested Answer

Suggested Answer: B

Explanation/Reference: Reference: https://docs.splunk.com/Documentation/Splunk/8.0.3/Report/Createandeditreports

by Carmen at Sep 02, 2023, 12:40 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

2 days ago

I'm not sure, but I think it's either A or D. Alerts can be based on scheduled searches or run in real-time.

upvoted 0 times

...

3 days ago

I agree with Taryn, because alerts can be triggered based on scheduled searches or in real-time.

upvoted 0 times

...

3 days ago

A) sounds right to me, alerts can be scheduled or real-time.

upvoted 0 times

...

8 days ago

I think the answer is A) Alerts are based on searches that are either run on a scheduled interval or in real-time.

upvoted 0 times

...