Splunk Core Certified Power User — Question 14

Which of the following statements describe data model acceleration? (Choose all that apply.)

Answer options

• A. Root events cannot be accelerated.
• B. Accelerated data models cannot be edited.
• C. Private data models cannot be accelerated.
• D. You must have administrative permissions or the accelerate_datamodel capability to accelerate a data model.

Correct answer: B, C, D

Explanation

Option B is correct because once a data model is accelerated, it cannot be modified. Option C is true as private data models do not support acceleration. Option D is also correct since specific permissions are necessary for accelerating a data model. Option A is incorrect because root events can be accelerated under certain conditions.