Splunk Exam SPLK-2003 Topic 1 Question 6 Discussion

Actual exam question for Splunk's SPLK-2003 exam

Question #: 6
Topic #: 1

When analyzing events a working on a case, significant items can be marked as evidence. Where can ail of a case's evidence items be viewed together?

AWorkbook page Evidence tab.

BEvidence report.

CInvestigation page Evidence tab.

DAt the bottom of the Investigation page widget panel.

Show Suggested Answer

Suggested Answer: C

by Rickie at May 26, 2022, 06:03 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!