Splunk Infrastructure Overview — Question 1

What default Splunk role can use the Log Event alert action?

Answer options

• A. Power
• B. User
• C. can_delete
• D. Admin

Correct answer: A

Explanation

The Power role in Splunk has the necessary permissions to use the Log Event alert action, allowing users to log specific events. The User role does not have this capability, while the can_delete role is focused on deletion permissions, and the Admin role has broader access but is not specifically tied to this action.