Splunk Core Certified User — Question 37

What determines the scope of data that appears in a scheduled report?

Answer options

• A. All data accessible to the User role will appear in the report.
• B. All data accessible to the owner of the report will appear in the report.
• C. All data accessible to all users will appear in the report until the next time the report is run.
• D. The owner of the report can configure permissions so that the report uses either the User role or the owner's profile at run time.

Correct answer: B

Explanation

The correct answer is B because the report will include all data that the report's owner has access to. Options A and C are incorrect as they refer to data access by the User role and all users, respectively, which do not dictate the report's data scope. Option D is also incorrect because it talks about configuring permissions rather than determining the inherent scope of the report data based on ownership.