Splunk Exam SPLK-2003 Topic 10 Question 55 Discussion

Actual exam question for Splunk's SPLK-2003 exam

Question #: 55
Topic #: 10

[All SPLK-2003 Questions]

How can a user with the username "pat" configure the Analyst Queue to only show new events that are assigned to the current user?

ACreate a filter for label-new and owner-pat.

BCreate a filter for status-open and owner-pat.

CCreate a filter for status=new and owner=pat.

DCreate a filter for status=new or owner=pat.

Show Suggested Answer

Suggested Answer: D

by Georgiann at Sep 12, 2024, 11:04 PM

Limited Time Offer

25%

Off

Get Premium SPLK-2003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Karma

10 days ago

Hmm, I was leaning towards option D, but I can see how that might show more than just the new events assigned to the current user. C is the clear winner here.

upvoted 0 times

...

Lindsey

13 days ago

I was thinking option B, but you're right, option C is the way to go. Gotta be specific with those filters!

upvoted 0 times

...

Ming

14 days ago

Option C looks like the correct answer to me. We need to create a filter for both the status and the owner to only show new events assigned to the current user.

upvoted 0 times

...