Splunk Core Certified User — Question 36

Which of the following is the recommended way to create multiple dashboards displaying data from the same search?

Answer options

• A. Save the search as a report and use it in multiple dashboards as needed.
• B. Save the search as a dashboard panel for each dashboard that needs the data.
• C. Save the search as a scheduled alert and use it in multiple dashboards as needed.
• D. Export the results of the search to an XML file and use the file as the basis of the dashboards.

Correct answer: A

Explanation

The correct answer is A because saving the search as a report allows you to reuse the same data across different dashboards without duplication. Options B, C, and D involve creating separate instances or formats of the data, which is less efficient and can lead to inconsistencies.