Splunk Enterprise Certified Admin — Question 50
In order to successfully accelerate a report, which criteria must the search meet? (Select all that apply.)
Answer options
- A. Cannot use event sampling.
- B. Use a transforming command.
- C. Use a standard Splunk visualization.
- D. Commands before the first transforming command must be streamable.
Correct answer: A, B, D
Explanation
Answer A is correct because event sampling is not allowed for acceleration. Answer B is also correct as a transforming command is necessary for report acceleration. Answer D is true since all commands preceding the first transforming command must be streamable. Answer C is incorrect because using a standard Splunk visualization is not a requirement for accelerating a report.