Splunk Exam SPLK-1004 Topic 1 Question 1 Discussion

Actual exam question for Splunk's SPLK-1004 exam

Question #: 1
Topic #: 1

[All SPLK-1004 Questions]

Which element attribute is required for event annotation?

A<search type='event_annotation'>

B<search style='annotation'>

C<search type=$annotation$>

D<search type='annotation'>

Show Suggested Answer

Suggested Answer: D

In Splunk dashboards, event annotations are used to add informative overlays on timeline visualizations to mark significant events. The required element attribute to define an event annotation within a dashboard panel is <search type='annotation'> (Option D). This attribute specifies that the search within this element is intended to generate annotations, which are then overlaid on the timeline based on the time and information provided by the search results.

by Kimbery at Mar 08, 2024, 01:20 AM

Limited Time Offer

25%

Off

Get Premium SPLK-1004 Questions as Interactive Web-Based Practice Test or PDF