Splunk Enterprise Certified Admin — Question 66

When using the Splunk Web Framework to create a global search, which is the correct post-process syntax for the base search shown below? var searchmain = new SearchManager{{ id: `base-search`, search: `index= internal | head 10 | fields `*`, preview: true, cache: true
}};

Answer options

• A. var mypostproc1 = new PostProcessManager {{ id: ג€post1ג€, managerid: ג€base-searchג€, search: ג€| stats count by sourcetypeג€ }};
• B. var mypostproc1 = new PostProcessManager{{ id: ג€post1ג€, managerid: ג€baseג€, search: ג€| stats count by sourcetypeג€ }};
• C. var mypostproc1 = new PostProcess{{ id: ג€post1ג€, managerid: ג€base-searchג€, search: ג€| search stats count by sourcetypeג€ }};
• D. You cannot create global searches in the Splunk Web Framework.

Correct answer: A

Explanation

The correct answer is A because it accurately uses the PostProcessManager with the correct manager ID and search syntax. Option B fails because it has an incorrect manager ID, option C incorrectly uses PostProcess instead of PostProcessManager, and option D is incorrect as it is indeed possible to create global searches in the Splunk Web Framework.