IBM QRadar SIEM V7.5 Administration — Question 4

A QRadar administrator creates a new saved search in QRadar and wants to add the search to a dashboard, but the option "Include in my Dashboard” cannot be selected.
What is a possible reason it is unavailable?

Answer options

• A. The option is valid only for searches based on events.
• B. The user does not sufficient permissions.
• C. The search is not grouped
• D. The option is valid only for searches based on flows.

Correct answer: B

Explanation

The correct answer is B because the ability to add a search to a dashboard is contingent upon user permissions. If a user does not have the necessary permissions, the option will be disabled. The other options relate to different types of searches or groupings, which do not affect the ability to include the search in a dashboard.