Splunk Enterprise Security Certified Admin — Question 52

What is the default schedule for accelerating ES Datamodels?

Answer options

• A. 1 minute
• B. 5 minutes
• C. 15 minutes
• D. 1 hour

Correct answer: B

Explanation

The default schedule for accelerating ES Datamodels is 5 minutes, which allows for timely updates without overloading system resources. Options A, C, and D represent intervals that are either too short or too long, potentially leading to inefficient data processing or outdated information.