Splunk IT Service Intelligence Certified Admin — Question 1

Which of the following can be edited or deleted in the Investigation page?

Answer options

• A. Action results
• B. Comments
• C. Artifact values
• D. Approval records

Correct answer: C

Explanation

Artifact values are the only elements that can be edited or deleted on the Investigation page, as they directly pertain to the data collected during the investigation. Action results, comments, and approval records are typically locked for integrity and audit purposes, preventing modification or deletion.