Splunk Core Certified User — Question 53
Which of the statements is correct regarding click and drag option in timeline?
Answer options
- A. The new result after selecting the range by dragging filters the events and displays the most recent first.
- B. There is no functionality like click and drag in Splunk's timeline.
- C. Using this option executes a new query.
- D. This doesn't execute a new query.
Correct answer: D
Explanation
The correct answer is D because using the click and drag feature in Splunk's timeline allows users to select a range of events without executing a new query. Options A, B, and C are incorrect as they either misrepresent the functionality or state that a new query is executed, which is not the case.