Splunk Enterprise Security Certified Admin — Question 36

Which of the following would allow an add-on to be automatically imported into Splunk Enterprise Security?

Answer options

• A. A prefix of CIM_
• B. A suffix of .spl
• C. A prefix of TECH_
• D. A prefix of Splunk_TA_

Correct answer: D

Explanation

The correct answer is D because add-ons that start with the prefix Splunk_TA_ are recognized by Splunk Enterprise Security for automatic import. Options A, B, and C do not meet the criteria for automatic integration into Splunk Enterprise Security.