In which of the following scenarios is an event type more effective than a saved search?

In which of the following scenarios is an event type more effective than a saved search?
A . When a search should always include the same time range.
B . When a search needs to be added to other users’ dashboards.
C . When the search string needs to be used in future searches.
D . When formatting needs to be included with the search string.

View Answer

Answer: C

Explanation:

Reference: https://answers.splunk.com/answers/4993/eventtype-vs-saved-search.html