Splunk SOAR Certified Automation Developer — Question 46

Where are KPI search results stored?

Answer options

• A. The default index.
• B. KV Store.
• C. Output to a CSV lookup.
• D. The itsi_summary index.

Correct answer: D

Explanation

The correct answer is D, as KPI search results are specifically stored in the itsi_summary index for analysis. Options A and B are incorrect since they refer to general index storage and key-value storage respectively, which do not apply to KPI results. Option C is also incorrect because outputting to a CSV lookup does not pertain to where the results are stored, but rather is a method of exporting data.