When using the Splunk Web Framework to create a global search, which is the correct post-process syntax for the base search shown below?

Posted by: Pdfprep Category: SPLK-2001 Tags: , ,

When using the Splunk Web Framework to create a global search, which is the correct post-process syntax for the base search shown below?

var searchmain = new SearchManager{{

id: “base-search”,

search: “index= internal | head 10 | fields “*”,

preview: true,

cache: true

}};
A . var mypostproc1 = new PostProcessManager {{ id: “post1”,
managerid: “base-search”,
search: “| stats count by sourcetype”
}};

B . var mypostproc1 = new PostProcessManager{{ id: “post1”,
managerid: “base”,
search: “| stats count by sourcetype”
}};
C . var mypostproc1 = new PostProcess{{
id: “post1”,
managerid: “base-search”,
search: “| search stats count by sourcetype”
}};
D . You cannot create global searches in the Splunk Web Framework.

Answer: A

Leave a Reply

Your email address will not be published.