Splunk Enterprise Certified Admin — Question 46
Assuming permissions are set appropriately, which REST endpoint path can be used by someone with a power user role to access information about mySearch, a saved search owned by someone with a user role?
Answer options
- A. /servicesNS/-/data/saved/searches/mySearch
- B. /servicesNS/object/saved/searches/mySearch
- C. /servicesNS/search/saved/searches/mySearch
- D. /servicesNS/-/search/saved/searches/mySearch
Correct answer: D
Explanation
The correct answer is D because this endpoint allows power users to access saved searches owned by users, given they have the right permissions. Option A is incorrect because it targets a different namespace, while B does not specify the correct action for saved searches. Option C is also incorrect as it does not align with the required access for saved searches owned by a user role.