Splunk Core Certified Power User — Question 116

How can an existing accelerated data model be edited?

Answer options

Correct answer: B

Explanation

The correct answer is B because de-accelerating the data model allows for structural changes to be made. Option A is incorrect as it is possible to edit an accelerated data model after de-acceleration. Option C is misleading; edits cannot be made simply based on the expiration of the .tsidx file. Option D is incorrect since the Pivot tool does not allow direct editing of an accelerated data model.