In which of the following scenarios is an event type more effective than a saved search?

In which of the following scenarios is an event type more effective than a saved search?
A . When a search should always include the same time range.
B . When a search needs to be added to other users’ dashboards.
C . When the search string needs to be used in future searches.
D . When formatting needs to be included with the search string.

Answer: C

Explanation:

Reference: https://answers.splunk.com/answers/4993/eventtype-vs-saved-search.html

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments