Splunk Core Certified User — Question 26

Which of the statements are correct? (Choose three.)

Answer options

• A. Zoom to selection: Narrows the time range and re-executes the search.
• B. Zoom to selection: Narrows the time range and doesn't re-executes the search.
• C. Format Timeline: Hides or shows the timeline in different views.
• D. Zoom-Out: Expands the time focus and doesn't re-executes the search.
• E. Zoom-out: Expands the time focus and re-executes the search.

Correct answer: A, C, E

Explanation

The correct answers are A, C, and E. Option A is correct because 'Zoom to selection' indeed narrows the time range and re-executes the search. Option C is also correct as 'Format Timeline' allows users to hide or show the timeline in various views. Option E is accurate because 'Zoom-out' expands the time focus and requires a re-execution of the search. Options B and D are incorrect as they state that 'Zoom to selection' does not re-execute the search, and 'Zoom-Out' does not re-execute either, which contradicts the functionalities described.