Splunk Core Certified User — Question 16
You can use the following options to specify start and end time for the query range:
Answer options
- A. earliest=
- B. latest=
- C. beginning=
- D. ending=
- E. All the above
- F. Only 3rd and 4th
Correct answer: F
Explanation
The options 'beginning=' and 'ending=' are valid for setting the start and end time for the query range, making option F correct. Options A and B are not applicable in this context, and option E is incorrect because it includes those options that do not qualify.