Splunk Exam SPLK-1004 Topic 1 Question 6 Discussion

When searching against summary data in Splunk, it's common to reference the name of the saved search or report that populated the summary index. The correct search syntax to retrieve data from the summary index populated by a report named 'Linux logins' is index=summary search_name='Linux logins' | top src_ip user (Option B). This syntax uses the search_name field, which holds the name of the saved search or report that generated the summary data, allowing for precise retrieval of the intended summary data.