Splunk Infrastructure Overview — Question 19

Which element attribute is required for event annotation?

Answer options

• A. <search type="event_annotation">
• B. <search style="annotation">
• C. <search type=$annotation
  gt;
• D. <search type="annotation">

Correct answer: D

Explanation

The correct answer is D because the 'type' attribute must specifically be set to 'annotation' for event annotation. Options A and C are incorrect as they refer to 'event_annotation' and an invalid format, respectively, while option B does not use the 'type' attribute at all.