Splunk Enterprise Certified Admin — Question 10

Which Splunk REST endpoint is used to create a KV store collection?

Answer options

• A. /storage/collections
• B. /storage/kvstore/create
• C. /storage/collections/config
• D. /storage/kvstore/collections

Correct answer: A

Explanation

The correct answer is A, as the /storage/collections endpoint is specifically designed to create collections in the KV store. Options B and D refer to endpoints that either do not exist or are intended for other operations, while C is related to configuration and not to the creation of collections.