Splunk Core Certified User — Question 108
Which of the following statements describes a search job?
Answer options
- A. Once a search job begins, it cannot be stopped
- B. A search job can only be paused when less than 50% of events are returned
- C. A search job can only be stopped when less than 50% of events are returned
- D. Once a search job begins, it can be stopped or paused at any point in time
Correct answer: D
Explanation
The correct answer, D, accurately reflects that a search job can indeed be stopped or paused at any time. Options A, B, and C are incorrect as they impose unnecessary restrictions on the ability to manage a search job once it has commenced.