Splunk Core Certified Power User — Question 43

When is a GET workflow action needed?

Answer options

• A. To send field values to an external resource.
• B. To retrieve information from an external resource.
• C. To use field values to perform a secondary search.
• D. To define how events flow from forwarders to indexes.

Correct answer: B

Explanation

The correct answer is B, as a GET workflow action is specifically used to retrieve information from an external resource. The other options describe actions that do not align with the purpose of a GET action, such as sending data or defining event flows.