In a deployment with multiple indexes, what will happen when a search is run and an index is not specified in the search string?

Posted by: Pdfprep Category: SPLK-1001 Tags: , ,

In a deployment with multiple indexes, what will happen when a search is run and an index is not specified in the search string?
A . No events will be returned.
B . Splunk will prompt you to specify an index.
C . All non-indexed events to which the user has access will be returned.
D . Events from every index searched by default to which the user has access will be returned.

Answer: D

Leave a Reply

Your email address will not be published.