Splunk Observability Cloud Certified Associate — Question 4

If a correlation search cannot be run at the configured time, which scheduling option should an engineer use to ensure there are no backfill gaps in data?

Answer options

• A. Default
• B. Continuous
• C. Real-time
• D. Auto

Correct answer: B

Explanation

The Continuous option allows the correlation search to run perpetually, ensuring that no data gaps occur even if it cannot execute at the initially configured time. The other options, such as Default and Auto, do not provide the same level of ongoing execution, while Real-time is focused on immediate data handling rather than consistent execution.